Files
astuto/app/policies/tenant_policy.rb
2024-03-24 12:54:02 +01:00

21 lines
360 B
Ruby

class TenantPolicy < ApplicationPolicy
def permitted_attributes_for_create
[:site_name, :subdomain]
end
def permitted_attributes_for_update
if user.admin?
[:site_name, :site_logo, :locale, :custom_domain]
else
[]
end
end
def create?
true
end
def update?
user.admin? and user.tenant_id == record.id
end
end