fab-manager/app/policies/setting_policy.rb

# frozen_string_literal: true

# Check the access policies for API::SettingsController
class SettingPolicy < ApplicationPolicy
  %w[update bulk_update].each do |action|
    define_method "#{action}?" do
      user.admin?
    end
  end
end