mirror of
https://github.com/LaCasemate/fab-manager.git
synced 2024-11-29 10:24:20 +01:00
17 lines
512 B
Ruby
17 lines
512 B
Ruby
# frozen_string_literal: true
|
|
|
|
# Check the access policies for API::SupportingDocumentFilesController
|
|
class SupportingDocumentFilePolicy < ApplicationPolicy
|
|
def index?
|
|
user.privileged?
|
|
end
|
|
|
|
%w[create update download].each do |action|
|
|
define_method "#{action}?" do
|
|
user.privileged? ||
|
|
(record.supportable_type == 'User' && record.supportable_id.to_i == user.id) ||
|
|
(record.supportable_type == 'Child' && user.children.exists?(id: record.supportable_id.to_i))
|
|
end
|
|
end
|
|
end
|