A lot of things.

app/Http/Requests/StoreEntryRequest.php

@@ -14,8 +14,11 @@ class StoreEntryRequest extends FormRequest
      */
     public function authorize(): bool
     {
-        // TODO: Change it by role.
-        return true;
+        $entry = $this->route('entry');
+        if( $entry )
+            return $this->user()->can('update', $entry);
+
+        return $this->user()->can('create', '\App\Models\Entry');
     }
 
     /**

app/Http/Requests/TemporaryFileUploadRequest.php

@@ -2,6 +2,7 @@
 
 namespace App\Http\Requests;
 
+use App\Services\TemporaryFileService;
 use Illuminate\Contracts\Validation\ValidationRule;
 use Illuminate\Foundation\Http\FormRequest;
 
@@ -12,7 +13,7 @@ class TemporaryFileUploadRequest extends FormRequest
      */
     public function authorize(): bool
     {
-        return true;
+        return $this->user()->can('create', TemporaryFileService::class );
     }
 
     /**