mirror of
https://github.com/LaCasemate/fab-manager.git
synced 2024-11-29 10:24:20 +01:00
19 lines
641 B
Ruby
19 lines
641 B
Ruby
# frozen_string_literal: true
|
|
|
|
# Check the access policies for API::SlotsReservationsController
|
|
class SlotsReservationPolicy < ApplicationPolicy
|
|
def update?
|
|
# check that the update is allowed and the prevention delay has not expired
|
|
delay = Setting.get('booking_move_delay').to_i
|
|
enabled = Setting.get('booking_move_enable')
|
|
|
|
# these condition does not apply to admins
|
|
user.admin? || user.manager? ||
|
|
(record.reservation.user == user && enabled && ((record.slot.start_at - DateTime.current).to_i / 3600 >= delay))
|
|
end
|
|
|
|
def cancel?
|
|
user.admin? || user.manager? || record.reservation.user == user
|
|
end
|
|
end
|