code-corps/code-corps-api

defmodule CodeCorps.Policy.User do
  @moduledoc ~S"""
  Contains authorization policies for performing actions on a `User` record.

  Used to authorize controller actions.
  """
  alias CodeCorps.User

  @spec update?(User.t, User.t) :: boolean
  def update?(%User{id: current_user_id}, %User{id: user_id})
    when current_user_id == user_id, do: true
  def update?(%User{}, %User{}), do: false
end