blob: 2710c9c0a5b64073080d4bb1c2c20addbd793c99 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
|
# frozen_string_literal: true
module Achievements
class UserAchievementPolicy < ::BasePolicy
delegate { @subject.achievement.namespace }
delegate { @subject.user }
condition(:user_is_owner) { @subject.user == @user }
rule { can?(:read_user_profile) | can?(:admin_achievement) }.enable :read_user_achievement
rule { user_is_owner }.enable :update_owned_user_achievement
rule { can?(:update_owned_user_achievement) }.enable :update_user_achievement
rule { ~can?(:read_achievement) }.policy do
prevent :read_user_achievement
prevent :update_user_achievement
end
end
end
|
