pundit: convert user name change requests to pundit.

Fix discrepancy between index action and show action. The index
action allowed members to see name changes for undeleted users, but the
show action didn't.
This commit is contained in:
evazion
2020-03-17 05:17:57 -05:00
parent db63b6d44f
commit 565a6572a7
5 changed files with 39 additions and 28 deletions

View File

@@ -0,0 +1,13 @@
class UserNameChangeRequestPolicy < ApplicationPolicy
def index?
user.is_member?
end
def show?
user.is_admin? || (user.is_member? && !record.user.is_deleted?) || (record.user == user)
end
def permitted_attributes
[:desired_name, :desired_name_confirmation]
end
end