19 lines
245 B
Ruby
19 lines
245 B
Ruby
class ApiSecretPolicy < ApplicationPolicy
|
|
def create?
|
|
!user_suspended?
|
|
end
|
|
|
|
def destroy?
|
|
user_owner?
|
|
end
|
|
|
|
def permitted_attributes
|
|
%i[description]
|
|
end
|
|
|
|
private
|
|
|
|
def user_owner?
|
|
user.id == record.user_id
|
|
end
|
|
end
|