Authorization tutorial result: should final state still include policy errors?

I saw you don’t have $article->user_id = $this->request->getAttribute('identity')->getIdentifier(); and #$this->Authorization->authorize($article); in your ArticlesController.add() . Why not?

Moreover, I also have canAdd and canEdit in addition to your methods.( I was already confused by canEdit and canUpdate, both used in the documentation.)

And what does the ignoring of debug do to the functioning?

Since I have a related issue with the authorization through the identity.can() method, it might be something else.