basics of admin_override policy function
This commit is contained in:
parent
e64a16f1b8
commit
d8cc588efb
1 changed files with 8 additions and 0 deletions
|
@ -34,6 +34,14 @@ class ApplicationPolicy
|
||||||
false
|
false
|
||||||
end
|
end
|
||||||
|
|
||||||
|
# TODO update this function to enable some flag in the interface
|
||||||
|
# so that admins usually can't do super admin stuff unless they
|
||||||
|
# explicitly say they want to (E.g. seeing/editing/deleting private
|
||||||
|
# maps - they should be able to, but not by accident)
|
||||||
|
def admin_override
|
||||||
|
user.admin
|
||||||
|
end
|
||||||
|
|
||||||
def scope
|
def scope
|
||||||
Pundit.policy_scope!(user, record.class)
|
Pundit.policy_scope!(user, record.class)
|
||||||
end
|
end
|
||||||
|
|
Loading…
Reference in a new issue