Enforce access control restrictions using Eloquent models