Files
astuto/app/policies/tenant_setting_policy.rb

13 lines
292 B
Ruby

class TenantSettingPolicy < ApplicationPolicy
def permitted_attributes_for_update
if user.admin?
[:brand_display, :root_board_id, :show_vote_count, :show_vote_button_in_board]
else
[]
end
end
def update?
user.admin? and user.tenant_id == record.id
end
end