mirror of
https://github.com/LaCasemate/fab-manager.git
synced 2024-12-03 14:24:23 +01:00
17 lines
313 B
Ruby
17 lines
313 B
Ruby
# frozen_string_literal: true
|
|
|
|
# Check the access policies for API::OrdersController
|
|
class OrderPolicy < ApplicationPolicy
|
|
def show?
|
|
user.privileged? || (record.statistic_profile_id == user.statistic_profile.id)
|
|
end
|
|
|
|
def update?
|
|
user.privileged?
|
|
end
|
|
|
|
def destroy?
|
|
user.privileged?
|
|
end
|
|
end
|