mirror of
https://github.com/Freika/dawarich.git
synced 2026-01-09 08:47:11 -05:00
26 lines
515 B
Ruby
26 lines
515 B
Ruby
# frozen_string_literal: true
|
|
|
|
class Family::InvitationPolicy < ApplicationPolicy
|
|
def show?
|
|
# Public endpoint for invitation acceptance - no authentication required
|
|
true
|
|
end
|
|
|
|
def create?
|
|
return false unless user
|
|
|
|
user.family == record.family && user.family_owner?
|
|
end
|
|
|
|
def accept?
|
|
# Users can accept invitations sent to their email
|
|
return false unless user
|
|
|
|
user.email == record.email
|
|
end
|
|
|
|
def destroy?
|
|
# Only family owners can cancel invitations
|
|
create?
|
|
end
|
|
end
|