Refs #2476 : Disable modification and deletion of resources from another referential; in progress

1 files changed, 22 insertions, 0 deletions

diff --git a/app/policies/connection_link_policy.rb b/app/policies/connection_link_policy.rb
new file mode 100644
index 000000000..cc49f575f
--- /dev/null
+++ b/app/policies/connection_link_policy.rb
@@ -0,0 +1,22 @@
+class ConnectionLinkPolicy < ApplicationPolicy
+  class Scope < Scope
+    def resolve
+      scope
+    end
+  end
+
+  def create?
+    user.has_permission?('connection_links.create') # organisation match via referential is checked in the view
+  end
+
+  def edit?
+    organisation_match?(via_referential: true) && user.has_permission?('connection_links.edit')
+  end
+
+  def destroy?
+    organisation_match?(via_referential: true) && user.has_permission?('connection_links.destroy')
+  end
+
+  def update?  ; edit? end
+  def new?     ; create? end
+end