Initial commit

app/policies/account_auth_policy.rb

@@ -0,0 +1,25 @@
+class AccountAuthPolicy < ApplicationPolicy
+  class Scope < Scope
+    def resolve
+      if user.admin?
+        scope.all
+      elsif user.account_manager?
+        scope.where(account: user.account)
+      else
+        scope.none
+      end
+    end
+  end
+
+  def create?
+    user.admin? || user.account_manager?
+  end
+
+  def update?
+    user.admin? || user.account_manager?
+  end
+
+  def destroy?
+    user.admin? || user.account_manager?
+  end
+end