fab-manager/app/policies/group_policy.rb

# frozen_string_literal: true

# Check the access policies for API::GroupsController
class GroupPolicy < ApplicationPolicy
  def create?
    user.admin?
  end

  def update?
    user.admin?
  end

  def destroy?
    user.admin? and record.destroyable?
  end
end