20 lines
374 B
Ruby
20 lines
374 B
Ruby
|
# frozen_string_literal: true
|
||
|
|
||
|
class UserRolePolicy < ApplicationPolicy
|
||
|
def index?
|
||
|
role.can?(:manage_roles)
|
||
|
end
|
||
|
|
||
|
def create?
|
||
|
role.can?(:manage_roles)
|
||
|
end
|
||
|
|
||
|
def update?
|
||
|
role.can?(:manage_roles) && role.overrides?(record)
|
||
|
end
|
||
|
|
||
|
def destroy?
|
||
|
!record.everyone? && role.can?(:manage_roles) && role.overrides?(record) && role.id != record.id
|
||
|
end
|
||
|
end
|