Check user permissions in CompanyPolicy. Refs #4967

1 files changed, 16 insertions, 4 deletions

diff --git a/app/policies/company_policy.rb b/app/policies/company_policy.rb
index 45386aba4..b08dcec53 100644
--- a/app/policies/company_policy.rb
+++ b/app/policies/company_policy.rb
@@ -1,7 +1,19 @@
 class CompanyPolicy < ApplicationPolicy
-    class Scope < Scope
-      def resolve
-        scope
-      end
+  class Scope < Scope
+    def resolve
+      scope
     end
   end
+
+  def create?
+    user.has_permission?('companies.create')
+  end
+
+  def destroy?
+    user.has_permission?('companies.destroy')
+  end
+
+  def update?
+    user.has_permission?('companies.update')
+  end
+end