app/policies/staff/person_policy.rb
# frozen_string_literal: true
class Staff::PersonPolicy < ApplicationPolicy
def index?
return false if restricted?
account&.superuser?
end
def show?
return false if restricted?
account&.superuser?
end
def create?
return false if restricted?
account&.superuser?
end
def permitted_attributes_for_create
return [] if restricted?
%i[last_name first_name middle_name sex date_of_birth place_of_birth photo]
end
class Scope < Scope
def resolve
return scope.none if restricted?
return scope.all if account&.superuser?
scope.none
end
end
end