basics of admin_override policy function
This commit is contained in:
parent
e64a16f1b8
commit
d8cc588efb
1 changed files with 8 additions and 0 deletions
|
@ -34,6 +34,14 @@ class ApplicationPolicy
|
|||
false
|
||||
end
|
||||
|
||||
# TODO update this function to enable some flag in the interface
|
||||
# so that admins usually can't do super admin stuff unless they
|
||||
# explicitly say they want to (E.g. seeing/editing/deleting private
|
||||
# maps - they should be able to, but not by accident)
|
||||
def admin_override
|
||||
user.admin
|
||||
end
|
||||
|
||||
def scope
|
||||
Pundit.policy_scope!(user, record.class)
|
||||
end
|
||||
|
|
Loading…
Reference in a new issue