notebook/app/authorizers/content_authorizer.rb
2017-01-14 00:06:33 +01:00

20 lines
415 B
Ruby

class ContentAuthorizer < ApplicationAuthorizer
def readable_by? user
[
resource.user_id == user.id,
resource.privacy == 'public',
resource.universe.present? && resource.universe.privacy == 'public'
].any?
end
def updatable_by? user
#todo: Collaboration
resource.user_id == user.id
end
def deletable_by? user
#todo: Collaboration
resource.user_id == user.id
end
end