Files
astuto/app/policies/tenant_setting_policy.rb
2024-07-12 20:38:46 +02:00

24 lines
518 B
Ruby

class TenantSettingPolicy < ApplicationPolicy
def permitted_attributes_for_update
if user.admin?
[
:brand_display,
:root_board_id,
:allow_anonymous_feedback,
:feedback_approval_policy,
:show_vote_count,
:show_vote_button_in_board,
:show_powered_by,
:show_roadmap_in_header,
:collapse_boards_in_header,
:custom_css
]
else
[]
end
end
def update?
user.admin? and user.tenant_id == record.id
end
end