app/policies/ci/runner_machine_policy.rb


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18

# frozen_string_literal: true

module Ci
  class RunnerMachinePolicy < BasePolicy
    with_options scope: :subject, score: 0

    condition(:can_read_runner, scope: :subject) do
      can?(:read_runner, @subject.runner)
    end

    rule { anonymous }.prevent_all

    rule { can_read_runner }.policy do
      enable :read_builds
      enable :read_runner_machine
    end
  end
end