class UserPolicy < ApplicationPolicy class Scope < Scope def resolve if user.admin? scope.all else scope.none end end end def create? user.admin? || user.account_manager? end def update? user.admin? end def destroy? user.admin? end def show? user.account_manager? end end