Files
astuto/app/policies/tenant_policy.rb
2023-02-04 15:43:15 +01:00

21 lines
344 B
Ruby

class TenantPolicy < ApplicationPolicy
def permitted_attributes_for_create
[:site_name, :subdomain]
end
def permitted_attributes_for_update
if user.admin?
[:site_name, :site_logo, :locale]
else
[]
end
end
def create?
true
end
def update?
user.admin? and user.tenant_id == record.id
end
end