getUser()->isAdmin(); } public function beforeCreate(): void { throw new Forbidden(); } public function beforeUpdate(): void { throw new Forbidden(); } }