1
0
mirror of https://github.com/LaCasemate/fab-manager.git synced 2024-12-10 21:24:20 +01:00
fab-manager/app/policies/payment_schedule_policy.rb

17 lines
494 B
Ruby

# frozen_string_literal: true
# Check the access policies for API::PaymentSchedulesController
class PaymentSchedulePolicy < ApplicationPolicy
%w[list? cash_check? confirm_transfer? cancel? update?].each do |action|
define_method action do
user.admin? || user.manager?
end
end
%w[refresh_item? download? pay_item? show_item?].each do |action|
define_method action do
user.admin? || user.manager? || (record.invoicing_profile.user_id == user.id)
end
end
end