policies = [ 'invoice' => [ 'viewAny' => URR::make('userIsAdmin', $user), 'view' => URR::make('userIsAdmin', $user), 'create' => URR::make('userIsAdmin', $user), 'update' => [ URR::make('userIsAdmin', $user), ISR::make('invoiceHasNotBeenSentTotheClient', $user), ], 'delete' => URR::make('denyEveryOne'), 'download' => [ URR::make('userIsAdmin', $user), ISR::make('invoiceHasTasks', $user), ] ] ]; } }