hasPermission('invoices.view') || $user->id === (int) $userId; } public function show(User $user, Invoice $invoice): bool { return $user->hasPermission('invoices.view') || $invoice->subscription->user_id == $user->id; } }