mirror of
https://github.com/LaCasemate/fab-manager.git
synced 2024-11-29 10:24:20 +01:00
17 lines
313 B
Ruby
17 lines
313 B
Ruby
|
# frozen_string_literal: true
|
||
|
|
|
||
|
|
# Check the access policies for API::OrdersController
|
||
|
|
class OrderPolicy < ApplicationPolicy
|
||
|
|
def show?
|
||
|
|
user.privileged? || (record.statistic_profile_id == user.statistic_profile.id)
|
||
|
|
end
|
||
|
|
|
||
|
|
def update?
|
||
|
|
user.privileged?
|
||
|
|
end
|
||
|
|
|
||
|
|
def destroy?
|
||
|
|
user.privileged?
|
||
|
|
end
|
||
|
|
end
|