Only users with verified emails are allowed to create new jobs

2024-09-17 12:42:59 +02:00
parent b1b24a3b26
commit 848777481d
10 changed files with 37 additions and 1 deletions
--- a/app/policies/application_policy.rb
+++ b/app/policies/application_policy.rb
@@ -1,12 +1,17 @@
 # Base class for application policies
 class ApplicationPolicy < ActionPolicy::Base
-  pre_check :allow_admins
+  pre_check :allow_admins, :only_verified_users

  # admin is good! :)
  def allow_admins
    allow! if user.admin?
  end

+  # no email verification no rights
+  def only_verified_users
+    deny! unless user.verified?
+  end
+
  # Configure additional authorization contexts here
  # (`user` is added by default).
  #