authorize(), so the REST API enforces the same // policies the Filament panel does. use AuthorizesRequests; }