f38910f0a2
These can sometimes contain sensitive information, such as IP addresses or what files a user is trying to upload.
27 lines
459 B
Ruby
27 lines
459 B
Ruby
# frozen_string_literal: true
|
|
|
|
class BackgroundJobPolicy < ApplicationPolicy
|
|
def index?
|
|
true
|
|
end
|
|
|
|
def update?
|
|
user.is_admin?
|
|
end
|
|
|
|
def can_see_params?
|
|
user.is_admin?
|
|
end
|
|
|
|
alias_method :cancel?, :update?
|
|
alias_method :destroy?, :update?
|
|
alias_method :retry?, :update?
|
|
alias_method :run?, :update?
|
|
|
|
def api_attributes
|
|
attributes = super
|
|
attributes -= [:serialized_params] unless can_see_params?
|
|
attributes
|
|
end
|
|
end
|