I'm not answering the question 100%, but you could use spatie/laravel-permission and you could then introduce the roles/permissions when you run queries: https://spatie.be/docs/laravel-permission/v6/basic-usage/basic-usage#content-eloquent-calls