gitlab-org--gitlab-foss/app/policies/namespace_policy.rb

class NamespacePolicy < BasePolicy
  def rules
    return unless @user

    if @subject.owner == @user || @user.admin?
      can! :create_projects
      can! :admin_namespace
    end
  end
end