Work Orders resource and on the edit page of each is a relation manager for Work Order Notes. I have policies for both models.create method on the WorkOrderNotePolicy that doesn't pass in anything other than the user. Eg.canAction methods on the relation manager and I override the one's I need. Not sure if this is the best way to do this though but it works.