1
0
mirror of https://github.com/LaCasemate/fab-manager.git synced 2024-12-02 13:24:20 +01:00
fab-manager/app/policies/slots_reservation_policy.rb
2022-07-18 17:18:01 +02:00

19 lines
641 B
Ruby

# frozen_string_literal: true
# Check the access policies for API::SlotsReservationsController
class SlotsReservationPolicy < ApplicationPolicy
def update?
# check that the update is allowed and the prevention delay has not expired
delay = Setting.get('booking_move_delay').to_i
enabled = Setting.get('booking_move_enable')
# these condition does not apply to admins
user.admin? || user.manager? ||
(record.reservation.user == user && enabled && ((record.slot.start_at - DateTime.current).to_i / 3600 >= delay))
end
def cancel?
user.admin? || user.manager? || record.reservation.user == user
end
end