1
0
mirror of https://github.com/LaCasemate/fab-manager.git synced 2024-12-10 21:24:20 +01:00
fab-manager/app/policies/subscription_policy.rb
2020-04-29 11:11:57 +02:00

18 lines
458 B
Ruby

# frozen_string_literal: true
# Check the access policies for API::SubscriptionsController
class SubscriptionPolicy < ApplicationPolicy
include FablabConfiguration
def create?
!fablab_plans_deactivated? && (user.admin? || (user.manager? && record.user_id != user.id) || record.price.zero?)
end
def show?
user.admin? or record.user_id == user.id
end
def update?
user.admin? || (user.manager? && record.user.id != user.id)
end
end