Gab Social. All are welcome.

app/policies/invite_policy.rb

@@ -0,0 +1,29 @@
+# frozen_string_literal: true
+
+class InvitePolicy < ApplicationPolicy
+  def index?
+    staff?
+  end
+
+  def create?
+    min_required_role?
+  end
+
+  def deactivate_all?
+    admin?
+  end
+
+  def destroy?
+    owner? || (Setting.min_invite_role == 'admin' ? admin? : staff?)
+  end
+
+  private
+
+  def owner?
+    record.user_id == current_user&.id
+  end
+
+  def min_required_role?
+    current_user&.role?(Setting.min_invite_role)
+  end
+end