Laravel Policy is not being registered. Even if the Policy denies all abilities any authenticated user is being able to perform any action on any resource.
Policy example
