|null $roles */ public function lock(User $actor, ?array $roles = null): User { abort_unless(auth()->id() === $actor->id && $actor->tenant_id !== null, 403); if (DB::connection()->transactionLevel() === 0) { throw new \LogicException('Revalidar o operador dentro da transacção.'); } $user = User::query()->where('tenant_id', $actor->tenant_id)->lockForUpdate()->findOrFail($actor->id); abort_unless($roles === null || $user->hasFunctions($roles), 403); return $user; } }