Add auth in all controllers

2025-03-22 13:07:12 +01:00
parent 5472a400d1
commit 6b02eecb9b
11 changed files with 107 additions and 6 deletions
--- a/app/policies/contest_policy.rb
+++ b/app/policies/contest_policy.rb
@@ -0,0 +1,29 @@
+class ContestPolicy < ApplicationPolicy
+  def index?
+    true
+  end
+
+  def show?
+    record.user.id == user.id || user.admin?
+  end
+
+  def new?
+    true
+  end
+
+  def create?
+    true
+  end
+
+  def edit?
+    record.user.id == user.id || user.admin?
+  end
+
+  def update?
+    record.user.id == user.id || user.admin?
+  end
+
+  def destroy?
+    record.user.id == user.id || user.admin?
+  end
+end