class FavoritePolicy < ApplicationPolicy def create? unbanned? && user.is_member? end def destroy? record.user_id == user.id end end