Restrict access to some pages

app/policies/staff/person/account_connection_link_policy.rb

@@ -2,7 +2,7 @@
 
 class Staff::Person::AccountConnectionLinkPolicy < ApplicationPolicy
   def show?
-    account&.superuser?
+    record.person.account.nil? && account&.superuser?
   end
 
   def create?

app/views/staffs/people/show.html.erb

@@ -24,7 +24,7 @@
 
           <% if policy([:staff,
                         @person,
-                        ]).show? %>
+                        AccountConnectionLink.new(@person)]).show? %>
             <br/>
 
             <small>

spec/requests/staff/people/account_connection_links/show_spec.rb

@@ -29,7 +29,7 @@ RSpec.describe 'GET /staff/people/:person_id/account_connection_link' do
     let(:person) { create(:personal_account).person }
 
     specify do
-      expect(response).to have_http_status :ok
+      expect(response).to have_http_status :forbidden
     end
   end
 end