Files
danbooru/app/policies/user_name_change_request_policy.rb
evazion 565a6572a7 pundit: convert user name change requests to pundit.
Fix discrepancy between index action and show action. The index
action allowed members to see name changes for undeleted users, but the
show action didn't.
2020-03-20 18:03:00 -05:00

14 lines
291 B
Ruby

class UserNameChangeRequestPolicy < ApplicationPolicy
def index?
user.is_member?
end
def show?
user.is_admin? || (user.is_member? && !record.user.is_deleted?) || (record.user == user)
end
def permitted_attributes
[:desired_name, :desired_name_confirmation]
end
end