app/policies/deploy_token_policy.rb


1
2
3
4
5
6
7
8
9
10
11

class DeployTokenPolicy < BasePolicy
  with_options scope: :subject, score: 0
  condition(:maintainer) { @subject.project.team.maintainer?(@user) }

  rule { anonymous }.prevent_all

  rule { maintainer }.policy do
    enable :create_deploy_token
    enable :update_deploy_token
  end
end