user(); if ($user && !$user->hasRole('platform-admin')) { // Force tenant_id — prevents cross-tenant mass-assign attacks $model->tenant_id = $user->tenant_id; } }); } }