fab-manager/app/policies/machine_policy.rb

class MachinePolicy < ApplicationPolicy
  def create?
    user.is_admin?
  end

  def update?
    user.is_admin?
  end

  def destroy?
    user.is_admin? and record.destroyable?
  end
end