old-holivud2/app/policies/account_auth_policy.rb

class AccountAuthPolicy < ApplicationPolicy
  class Scope < Scope
    def resolve
      if user.admin?
        scope.all
      elsif user.account_manager?
        scope.where(account: user.account)
      else
        scope.none
      end
    end
  end

  def create?
    user.admin? || user.account_manager?
  end

  def update?
    user.admin? || user.account_manager?
  end

  def destroy?
    user.admin? || user.account_manager?
  end
end