first commit

common/Billing/Invoices/InvoicePolicy.php

@@ -0,0 +1,21 @@
+<?php
+
+namespace Common\Billing\Invoices;
+
+use App\Models\User;
+use Common\Core\Policies\BasePolicy;
+
+class InvoicePolicy extends BasePolicy
+{
+    public function index(User $user, $userId = null): bool
+    {
+        return $user->hasPermission('invoices.view') ||
+            $user->id === (int) $userId;
+    }
+
+    public function show(User $user, Invoice $invoice): bool
+    {
+        return $user->hasPermission('invoices.view') ||
+            $invoice->subscription->user_id == $user->id;
+    }
+}