basics of admin_override policy function

This commit is contained in:
Devin Howard 2016-03-11 21:25:24 +08:00
parent e64a16f1b8
commit d8cc588efb

View file

@ -34,6 +34,14 @@ class ApplicationPolicy
false
end
# TODO update this function to enable some flag in the interface
# so that admins usually can't do super admin stuff unless they
# explicitly say they want to (E.g. seeing/editing/deleting private
# maps - they should be able to, but not by accident)
def admin_override
user.admin
end
def scope
Pundit.policy_scope!(user, record.class)
end