# frozen_string_literal: true
class UserPolicy < ApplicationPolicy
def reset_password?
staff? && !record.staff?
end
def change_email?
def disable_2fa?
admin? && !record.staff?
def confirm?
staff? && !record.confirmed?
def enable?
admin?
def disable?
admin? && !record.admin?
def promote?
admin? && promoteable?
def demote?
admin? && !record.admin? && demoteable?
private
def promoteable?
!record.staff? || !record.admin?
def demoteable?
record.staff?