055e5939b4
* Allow Member-level users to vote. * Don't allow Banned or Restricted users to create favorites any more. Banned and Restricted users aren't allowed to upvote or favorite any more to prevent sockpuppet accounts from upvoting even after they're banned.
10 lines
150 B
Ruby
10 lines
150 B
Ruby
class FavoritePolicy < ApplicationPolicy
|
|
def create?
|
|
unbanned? && user.is_member?
|
|
end
|
|
|
|
def destroy?
|
|
record.user_id == user.id
|
|
end
|
|
end
|