Merge branch 'master' into 4941-refactoring_object_id

3 files changed, 40 insertions, 6 deletions

diff --git a/app/policies/compliance_control_block_policy.rb b/app/policies/compliance_control_block_policy.rb
new file mode 100644
index 000000000..acbc1853f
--- /dev/null
+++ b/app/policies/compliance_control_block_policy.rb
@@ -0,0 +1,20 @@
+class ComplianceControlBlockPolicy < ApplicationPolicy
+  class Scope < Scope
+    def resolve
+      scope
+    end
+  end
+
+  def destroy?
+    user.has_permission?('compliance_control_blocks.destroy')
+  end
+
+  def create?
+    user.has_permission?('compliance_control_blocks.create')
+  end
+
+  def update?
+    user.has_permission?('compliance_control_blocks.update')
+  end
+
+end
diff --git a/app/policies/compliance_control_policy.rb b/app/policies/compliance_control_policy.rb
index 09250f013..a09760128 100644
--- a/app/policies/compliance_control_policy.rb
+++ b/app/policies/compliance_control_policy.rb
@@ -6,17 +6,15 @@ class ComplianceControlPolicy < ApplicationPolicy
   end
 
   def destroy?
-    # user.has_permission?('compliance_controls.destroy')
-    true
+    user.has_permission?('compliance_controls.destroy')
   end
 
   def create?
-    # user.has_permission?('compliance_controls.create')
-    true
+    user.has_permission?('compliance_controls.create')
   end
 
   def update?
-    # user.has_permission?('compliance_controls.update')
-    true
+    user.has_permission?('compliance_controls.update')
   end
+
 end
diff --git a/app/policies/compliance_control_set_policy.rb b/app/policies/compliance_control_set_policy.rb
index 12b829aa4..011f6c0c7 100644
--- a/app/policies/compliance_control_set_policy.rb
+++ b/app/policies/compliance_control_set_policy.rb
@@ -4,4 +4,20 @@ class ComplianceControlSetPolicy < ApplicationPolicy
       scope
     end
   end
+
+  def destroy?
+    user.has_permission?('compliance_control_sets.destroy')
+  end
+
+  def create?
+    user.has_permission?('compliance_control_sets.create')
+  end
+
+  def update?
+    user.has_permission?('compliance_control_sets.update')
+  end
+
+  def clone?
+    create?
+  end
 end