# frozen_string_literal: true class UserRolePolicy < ApplicationPolicy def index? role.can?(:manage_roles) end def create? role.can?(:manage_roles) end def update? role.can?(:manage_roles) && role.overrides?(record) end def destroy? !record.everyone? && role.can?(:manage_roles) && role.overrides?(record) && role.id != record.id end end