docbrown/app/policies/application_policy.rb
Mac Siri 465a676d75 Adjust BufferUpdatesController's authorization (#4070)
* Add back validation and add test

* Move article_admin?

* Adjust Buffer policy

* Create buffer_update_policy_spec
2019-09-20 11:50:34 -07:00

77 lines
1 KiB
Ruby

class ApplicationPolicy
attr_reader :user, :record
def initialize(user, record)
raise Pundit::NotAuthorizedError, "You must be logged in" unless user
@user = user
@record = record
end
def index?
false
end
def show?
scope.where(id: record.id).exists?
end
def create?
false
end
def new?
create?
end
def update?
false
end
def edit?
update?
end
def manage?
update? && record.published
end
def destroy?
false
end
def scope
Pundit.policy_scope!(user, record.class)
end
class Scope
attr_reader :user, :scope
def initialize(user, scope)
raise Pundit::NotAuthorizedError, "must be logged in" unless user
@user = user
@scope = scope
end
def resolve
scope
end
end
def minimal_admin?
user.has_role?(:super_admin) || user.has_role?(:admin)
end
def user_admin?
user.has_role?(:super_admin)
end
def user_is_banned?
user.banned
end
def user_is_trusted?
user.has_role?(:trusted)
end
end