1
0
mirror of https://github.com/LaCasemate/fab-manager.git synced 2024-12-13 23:48:55 +01:00
fab-manager/app/policies/slot_policy.rb
2020-05-25 16:47:06 +02:00

19 lines
612 B
Ruby

# frozen_string_literal: true
# Check the access policies for API::SlotsController
class SlotPolicy < ApplicationPolicy
def update?
# check that the update is allowed and the prevention delay has not expired
delay = Setting.get('booking_move_delay').to_i
enabled = Setting.get('booking_move_enable')
# these condition does not apply to admins
user.admin? || user.manager? ||
(record.reservation.user == user && enabled && ((record.start_at - DateTime.current).to_i / 3600 >= delay))
end
def cancel?
user.admin? || user.manager? || record.reservation.user == user
end
end