Watch out when you mix Resource Controllers and Authorisation with custom Controller Actions and custom routes... you may find you're lacking authorisation without realising it!
https://securinglaravel.com/security-tip-watch-out-for-resource/
#Laravel