class ProjectMembershipPolicy < ApplicationPolicy def create? # todo: harden the account manager case user.manager? || user.account_manager? end def destroy? create? end end