gitlab-org--gitlab-foss/app/policies/global_policy.rb

class GlobalPolicy < BasePolicy
  def rules
    return unless @user

    can! :create_group if @user.can_create_group
    can! :read_users_list
  end
end