class GroupPolicy < ApplicationPolicy def create? user.admin? end def update? user.admin? end def destroy? user.admin? and record.destroyable? end end