app/policies/personal_snippet_policy.rb


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27

class PersonalSnippetPolicy < BasePolicy
  def rules
    can! :read_personal_snippet if @subject.public?
    return unless @user

    if @subject.public?
      can! :comment_personal_snippet
    end

    if @subject.author == @user
      can! :read_personal_snippet
      can! :update_personal_snippet
      can! :destroy_personal_snippet
      can! :admin_personal_snippet
      can! :comment_personal_snippet
    end

    unless @user.external?
      can! :create_personal_snippet
    end

    if @subject.internal? && !@user.external?
      can! :read_personal_snippet
      can! :comment_personal_snippet
    end
  end
end