report_note_policy.rb 315 B

1234567891011121314151617
  1. # frozen_string_literal: true
  2. class ReportNotePolicy < ApplicationPolicy
  3. def create?
  4. role.can?(:manage_reports)
  5. end
  6. def destroy?
  7. owner? || (role.can?(:manage_reports) && role.overrides?(record.account.user_role))
  8. end
  9. private
  10. def owner?
  11. record.account_id == current_account&.id
  12. end
  13. end