fab-manager/app/policies/invoice_policy.rb

class InvoicePolicy < ApplicationPolicy
  def index?
    user.admin?
  end

  def download?
    user.admin? or (record.user_id == user.id)
  end

  def create?
    user.admin?
  end

  def list?
    user.admin?
  end
end