class EmailAddressPolicy < ApplicationPolicy
  def index?
    user.is_moderator?
  end

  def show?
    record.user_id == user.id || (user.is_moderator? && record.user.level < user.level)
  end

  def update?
    # XXX here record is a user, not the email address.
    record.id == user.id && !user.is_banned?
  end

  def verify?
    record.user_id == user.id
  end

  def send_confirmation?
    # XXX record is a user, not the email address.
    record.id == user.id
  end
end
