Add authorization for updating location sharing in FamiliesController

This commit is contained in:
Eugene Burmakin 2025-10-25 19:38:38 +02:00
parent 58ae4cf2ae
commit 749d1d0031
2 changed files with 6 additions and 0 deletions

View file

@ -77,6 +77,8 @@ class FamiliesController < ApplicationController
end
def update_location_sharing
authorize @family, :update_location_sharing?
result = Families::UpdateLocationSharing.new(
user: current_user,
enabled: params[:enabled],

View file

@ -34,6 +34,10 @@ class FamilyPolicy < ApplicationPolicy
user.family == record && user.family_owner?
end
def update_location_sharing?
user.family == record && user.family_owner?
end
private
def family_owner_with_members?