2017-11-28 02:07:59 +11:00
|
|
|
# frozen_string_literal: true
|
|
|
|
|
|
|
|
class InvitePolicy < ApplicationPolicy
|
|
|
|
def index?
|
|
|
|
staff?
|
|
|
|
end
|
|
|
|
|
|
|
|
def create?
|
|
|
|
min_required_role?
|
|
|
|
end
|
|
|
|
|
|
|
|
def destroy?
|
2017-12-01 22:26:19 +11:00
|
|
|
owner? || (Setting.min_invite_role == 'admin' ? admin? : staff?)
|
2017-11-28 02:07:59 +11:00
|
|
|
end
|
|
|
|
|
|
|
|
private
|
|
|
|
|
|
|
|
def owner?
|
|
|
|
record.user_id == current_user&.id
|
|
|
|
end
|
|
|
|
|
|
|
|
def min_required_role?
|
|
|
|
current_user&.role?(Setting.min_invite_role)
|
|
|
|
end
|
|
|
|
end
|