Files
codeocean/app/policies/submission_policy.rb
Sebastian Serth 5dd641082e Limit access to the study group dashboard to teachers of that group
Also rename teacher_in_study_group? to add a `?` at the end
2019-12-20 16:18:31 +01:00

20 lines
467 B
Ruby

class SubmissionPolicy < ApplicationPolicy
def create?
everyone
end
# insights? is used in the flowr_controller.rb as we use it to authorize the user for a submission
[:download?, :download_file?, :render_file?, :run?, :score?, :show?, :statistics?, :stop?, :test?, :insights?].each do |action|
define_method(action) { admin? || author? }
end
def index?
admin?
end
def show_study_group?
admin? || teacher_in_study_group?
end
end