mirror of
https://github.com/LaCasemate/fab-manager.git
synced 2024-12-01 12:24:28 +01:00
19 lines
656 B
Ruby
19 lines
656 B
Ruby
# frozen_string_literal: true
|
|
|
|
# Check the access policies for API::SlotsController
|
|
class SlotPolicy < ApplicationPolicy
|
|
def update?
|
|
# check that the update is allowed and the prevention delay has not expired
|
|
delay = Setting.find_by(name: 'booking_move_delay').value.to_i
|
|
enabled = (Setting.find_by(name: 'booking_move_enable').value == 'true')
|
|
|
|
# these condition does not apply to admins
|
|
user.admin? || user.manager? ||
|
|
(record.reservation.user == user && enabled && ((record.start_at - DateTime.current).to_i / 3600 >= delay))
|
|
end
|
|
|
|
def cancel?
|
|
user.admin? || user.manager? || record.reservation.user == user
|
|
end
|
|
end
|