04c7d0d555
This prevents performing the requests, and disables all emoji reaction buttons
21 lines
586 B
Ruby
21 lines
586 B
Ruby
class NotePolicy < BasePolicy
|
|
delegate { @subject.project }
|
|
delegate { @subject.noteable if DeclarativePolicy.has_policy?(@subject.noteable) }
|
|
|
|
condition(:is_author) { @user && @subject.author == @user }
|
|
condition(:is_noteable_author) { @user && @subject.noteable.author_id == @user.id }
|
|
|
|
condition(:editable, scope: :subject) { @subject.editable? }
|
|
|
|
rule { ~editable }.prevent :admin_note
|
|
|
|
rule { is_author }.policy do
|
|
enable :read_note
|
|
enable :admin_note
|
|
enable :resolve_note
|
|
end
|
|
|
|
rule { is_noteable_author }.policy do
|
|
enable :resolve_note
|
|
end
|
|
end
|