1 files changed, 19 insertions, 0 deletions
diff --git a/lib/api/entities/entity_helpers.rb b/lib/api/entities/entity_helpers.rb
new file mode 100644
index 00000000000..3a68044ad35
--- /dev/null
+++ b/lib/api/entities/entity_helpers.rb
@@ -0,0 +1,19 @@
+# frozen_string_literal: true
+
+module API
+  module Entities
+    module EntityHelpers
+      def can_read(attr, &block)
+        ->(obj, opts) { Ability.allowed?(opts[:user], "read_#{attr}".to_sym, yield(obj)) }
+      end
+
+      def can_destroy(attr, &block)
+        ->(obj, opts) { Ability.allowed?(opts[:user], "destroy_#{attr}".to_sym, yield(obj)) }
+      end
+
+      def expose_restricted(attr, &block)
+        expose attr, if: can_read(attr, &block)
+      end
+    end
+  end
+end