landing-api/app/Policies/MemberPolicy.php

<?php

declare(strict_types=1);

namespace App\Policies;

use App\Models\Member;
use App\Models\User;
use Illuminate\Database\Eloquent\Model;

class MemberPolicy extends ResourcePolicy
{
    protected function resource(): string
    {
        return 'members';
    }

    /**
     * People may always edit their own member profile, even without the
     * general permission — it is their public face, and requiring an admin for
     * a bio change is friction a volunteer group does not need.
     *
     * @param  Member|Model  $model
     */
    public function update(User $user, Model $model): bool
    {
        return $model->user_id === $user->id || parent::update($user, $model);
    }
}