    public function delete(DeleteInvoiceRequest $request)
    {
        $this->authorize('delete multiple invoices');

        Invoice::destroy($request->ids);

        return response()->json([
            'success' => true,
        ]);
    }
The software does not perform an authorization check when an actor attempts to access a resource or perform an action.