2017-11-27 15:07:59 +00:00
|
|
|
# frozen_string_literal: true
|
|
|
|
|
|
|
|
class InvitePolicy < ApplicationPolicy
|
|
|
|
def index?
|
|
|
|
staff?
|
|
|
|
end
|
|
|
|
|
|
|
|
def create?
|
|
|
|
min_required_role?
|
|
|
|
end
|
|
|
|
|
2018-08-18 22:58:53 +00:00
|
|
|
def deactivate_all?
|
|
|
|
admin?
|
|
|
|
end
|
|
|
|
|
2017-11-27 15:07:59 +00:00
|
|
|
def destroy?
|
2017-12-01 11:26:19 +00:00
|
|
|
owner? || (Setting.min_invite_role == 'admin' ? admin? : staff?)
|
2017-11-27 15:07:59 +00:00
|
|
|
end
|
|
|
|
|
|
|
|
private
|
|
|
|
|
|
|
|
def owner?
|
|
|
|
record.user_id == current_user&.id
|
|
|
|
end
|
|
|
|
|
|
|
|
def min_required_role?
|
|
|
|
current_user&.role?(Setting.min_invite_role)
|
|
|
|
end
|
|
|
|
end
|