在 laravel 5.8 使用 policy 原則

 * Determine whether the user can view the record.
 *
 * @param  AppUser  $user
 * @param  AppRecord  $record
 * @return mixed
 */
public function (User $user, Record $record)
{
    return $user->id === $record->user_id;
}

public function show(User $user, Record $record)
{
    $this->authorize('view', $record);

    //
}

public function show(User $user, Record $record)
{
    $this->authorizeForUser($user, 'view', $record);

    //
}

public function store(User $user)
{
    $this->authorize('create', Record::class);

    //
}