Initial commit

app/policies/account_policy.rb

@@ -0,0 +1,23 @@
+class AccountPolicy < ApplicationPolicy
+  class Scope < Scope
+    def resolve
+      if user.admin?
+        scope.all
+      else
+        scope.where(id: user.accounts.map(&:id))
+      end
+    end
+  end
+
+  def create?
+    user.admin?
+  end
+
+  def show?
+    user.admin?
+  end
+
+  def update?
+    user.admin? || user.accounts.map(&:id).include?(record.id)
+  end
+end