Files
danbooru/app/policies/password_policy.rb
2020-03-20 18:03:01 -05:00

10 lines
214 B
Ruby

class PasswordPolicy < ApplicationPolicy
def update?
record.id == user.id || user.is_admin?
end
def permitted_attributes
[:signed_user_id, :old_password, :password, :password_confirmation]
end
end