construprogress/app/Providers/AppServiceProvider.php

<?php

namespace App\Providers;

use App\Models\Task;
use App\Policies\TaskPolicy;
use Illuminate\Support\Facades\Gate;
use Illuminate\Support\ServiceProvider;

class AppServiceProvider extends ServiceProvider
{
    /**
     * Register any application services.
     */
    public function register(): void
    {
        //
    }

    /**
     * Bootstrap any application services.
     */
    public function boot(): void
    {
        // Register policies
        Gate::policy(Task::class, TaskPolicy::class);

        // Super-admin bypass: anyone with the "manage all" permission
        // (the Admin role has it) passes every authorization check.
        // Return true to allow, or null to let normal checks run — never false.
        Gate::before(function ($user, $ability) {
            try {
                return $user->hasPermissionTo('manage all') ? true : null;
            } catch (\Throwable $e) {
                return null;
            }
        });
    }
}