class GithubRepoPolicy < ApplicationPolicy def create? !user_is_banned? end def update? !user_is_banned? && user_is_owner? end def permitted_attributes %i[github_id_code featured] end private def user_is_owner? record.user_id == user.id end end