Authorization With Policies

We must be careful that we don't inadvertently give any registered forum user the ability to delete all threads. Let's create a policy class to ensure that this can't happen. View the the source code for this episode on GitHub.