protocol_policy.rb

class Manage::ProtocolPolicy < ApplicationPolicy
  def index?
    user_has_any_permissions?([:manage_protocols, nil])
  end

  def show?
    index?
  end

  def create?
    user_has_any_permissions?([:manage_protocols, nil])
  end

  def new?
    create?
  end

  def update?
    user_has_any_permissions?([:manage_protocols, nil])
  end

  def edit?
    update?
  end

  def destroy?
    user_has_any_permissions?([:manage_protocols, nil])
  end

  class Scope < Scope
    attr_reader :user, :scope

    def initialize(user, scope)
      super
      @user = user
      @scope = scope
    end

    def resolve
      return scope.none unless user.has_permission?(:manage_protocols)
      scope.all
    end
  end
end