28 lines
354 B
Ruby
28 lines
354 B
Ruby
|
|
class UserPolicy < ApplicationPolicy
|
||
|
|
class Scope < Scope
|
||
|
|
def resolve
|
||
|
|
if user.admin?
|
||
|
|
scope.all
|
||
|
|
else
|
||
|
|
scope.none
|
||
|
|
end
|
||
|
|
end
|
||
|
|
end
|
||
|
|
|
||
|
|
def create?
|
||
|
|
user.admin? || user.account_manager?
|
||
|
|
end
|
||
|
|
|
||
|
|
def update?
|
||
|
|
user.admin?
|
||
|
|
end
|
||
|
|
|
||
|
|
def destroy?
|
||
|
|
user.admin?
|
||
|
|
end
|
||
|
|
|
||
|
|
def show?
|
||
|
|
user.account_manager?
|
||
|
|
end
|
||
|
|
end
|