title: Laravel - Authorize with other policy
body: <p>I have a gallery policy and a photo policy, a gallery controller, and a photo controller. </p>
  
  <p>It works like this:</p>
  
  <pre><code>user-&gt; hasMany galleries -&gt; hasMany photos
  </code></pre>
  
  <p>I do have a photo upload page (with dropzone), that uses the photo controller.</p>
  
  <p>the url is like this: /gallery/3/upload</p>
  
  <p>I want to restrict access to this page only if the user is the owner of the gallery 3. But this page uses the PhotoPolicy, that makes use of the Photo model, not the Gallery model.</p>
  
  <p>How can I authorize this page, using the GalleryPolicy instead of the PhotoPolicy? Or do I have to copy over the view method from the GalleryPolicy and have it also in the PhotoPolicy?</p>
  
  <p><strong>EDIT:</strong></p>
  
  <p>I do not understand this...</p>
  
  <p>In my PhotoPolicy:</p>
  
  <pre><code> public function view(User $user, Photo $photo)
  {
      return false;        
  }
  </code></pre>
  
  <p>In my Photos controller:</p>
  
  <pre><code>        $this-&gt;authorize('view',  $photo);
  </code></pre>
  
  <p>In my AuthenticationServiceProvider:</p>
  
  <pre><code>protected $policies = [
      \App\Gallery::class =&gt; \App\Policies\GalleryPolicy::class,
      \App\Photo::class =&gt; \App\Policies\PhotoPolicy::class,
  ];
  </code></pre>
  
  <p>Restult: page loads just fine.. even if return is false.. why?</p>