1
0
mirror of https://github.com/LaCasemate/fab-manager.git synced 2024-12-11 22:24:21 +01:00
fab-manager/app/policies/checkout_policy.rb
2022-08-27 18:59:59 +02:00

11 lines
319 B
Ruby

# frozen_string_literal: true
# Check the access policies for API::CheckoutController
class CheckoutPolicy < ApplicationPolicy
%w[payment confirm_payment].each do |action|
define_method "#{action}?" do
return user.privileged? || (record.statistic_profile_id == user.statistic_profile.id)
end
end
end