チェックインの編集は本人のみ可能

(cherry picked from commit bcb5abb161)

app/Http/Controllers/EjaculationController.php

@@ -106,6 +106,10 @@ class EjaculationController extends Controller
     {
         $ejaculation = Ejaculation::findOrFail($id);
 
+        if (Auth::user()->cant('edit', $ejaculation)) {
+            abort(403);
+        }
+
         return view('ejaculation.edit')->with(compact('ejaculation'));
     }
 
@@ -113,6 +117,10 @@ class EjaculationController extends Controller
     {
         $ejaculation = Ejaculation::findOrFail($id);
 
+        if (Auth::user()->cant('edit', $ejaculation)) {
+            abort(403);
+        }
+
         $inputs = $request->all();
 
         $validator = Validator::make($inputs, [
@@ -163,6 +171,11 @@ class EjaculationController extends Controller
     public function destroy($id)
     {
         $ejaculation = Ejaculation::findOrFail($id);
+
+        if (Auth::user()->cant('edit', $ejaculation)) {
+            abort(403);
+        }
+
         $user = User::findOrFail($ejaculation->user_id);
         $ejaculation->tags()->detach();
         $ejaculation->delete();