app/Policies/ ​

Default Laravel directory to contain custom Policies files.

Policies are not used well in this project. Most of the authorization checks are done by if statements and hasRole conditions.

This can be a major problem for future improvements and must be refactored.