diff --git a/src/stubs/controller.model.stub b/src/stubs/controller.model.stub
index 0832ad7..d346efb 100644
--- a/src/stubs/controller.model.stub
+++ b/src/stubs/controller.model.stub
@@ -34,6 +34,8 @@ class MastersController extends Controller
      */
     public function store(Request $request)
     {
+        $this->authorize('create', new Master);
+
         $this->validate($request, [
             'name' => 'required|max:60',
             'description' => 'nullable|max:255',
@@ -53,6 +55,8 @@ class MastersController extends Controller
      */
     public function update(Request $request, Master $singleMstr)
     {
+        $this->authorize('update', $singleMstr);
+
         $this->validate($request, [
             'name' => 'required|max:60',
             'description' => 'nullable|max:255',
@@ -73,6 +77,8 @@ class MastersController extends Controller
      */
     public function destroy(Master $singleMstr)
     {
+        $this->authorize('delete', $singleMstr);
+
         $this->validate(request(), [
             'master_id' => 'required',
         ]);
diff --git a/tests/Generators/ControllerGeneratorTest.php b/tests/Generators/ControllerGeneratorTest.php
index 08f9e22..31c9004 100644
--- a/tests/Generators/ControllerGeneratorTest.php
+++ b/tests/Generators/ControllerGeneratorTest.php
@@ -48,6 +48,8 @@ class {$this->plural_model_name}Controller extends Controller
      */
     public function store(Request \$request)
     {
+        \$this->authorize('create', new {$this->model_name});
+
         \$this->validate(\$request, [
             'name' => 'required|max:60',
             'description' => 'nullable|max:255',
@@ -67,6 +69,8 @@ class {$this->plural_model_name}Controller extends Controller
      */
     public function update(Request \$request, {$this->model_name} \${$this->single_model_var_name})
     {
+        \$this->authorize('update', \${$this->single_model_var_name});
+
         \$this->validate(\$request, [
             'name' => 'required|max:60',
             'description' => 'nullable|max:255',
@@ -87,6 +91,8 @@ class {$this->plural_model_name}Controller extends Controller
      */
     public function destroy({$this->model_name} \${$this->single_model_var_name})
     {
+        \$this->authorize('delete', \${$this->single_model_var_name});
+
         \$this->validate(request(), [
             '{$this->lang_name}_id' => 'required',
         ]);
@@ -146,6 +152,8 @@ class CategoriesController extends Controller
      */
     public function store(Request \$request)
     {
+        \$this->authorize('create', new Category);
+
         \$this->validate(\$request, [
             'name' => 'required|max:60',
             'description' => 'nullable|max:255',
@@ -165,6 +173,8 @@ class CategoriesController extends Controller
      */
     public function update(Request \$request, Category \$category)
     {
+        \$this->authorize('update', \$category);
+
         \$this->validate(\$request, [
             'name' => 'required|max:60',
             'description' => 'nullable|max:255',
@@ -185,6 +195,8 @@ class CategoriesController extends Controller
      */
     public function destroy(Category \$category)
     {
+        \$this->authorize('delete', \$category);
+
         \$this->validate(request(), [
             'category_id' => 'required',
         ]);
@@ -245,6 +257,8 @@ class CategoriesController extends Controller
      */
     public function store(Request \$request)
     {
+        \$this->authorize('create', new Category);
+
         \$this->validate(\$request, [
             'name' => 'required|max:60',
             'description' => 'nullable|max:255',
@@ -264,6 +278,8 @@ class CategoriesController extends Controller
      */
     public function update(Request \$request, Category \$category)
     {
+        \$this->authorize('update', \$category);
+
         \$this->validate(\$request, [
             'name' => 'required|max:60',
             'description' => 'nullable|max:255',
@@ -284,6 +300,8 @@ class CategoriesController extends Controller
      */
     public function destroy(Category \$category)
     {
+        \$this->authorize('delete', \$category);
+
         \$this->validate(request(), [
             'category_id' => 'required',
         ]);