.

app/Controllers/Http/UserBalancesController.ts

@@ -20,8 +20,9 @@ export default class UserBalancesController {
         return userBalance
     }
 
-    public async show({ params }: HttpContextContract) {
+    public async show({ params, bouncer }: HttpContextContract) {
         const row = await UserBalance.findOrFail(params.id)
+        await bouncer.authorize('owner', row)
         return row
     }