# Copyright (C) 2012-2022 Zammad Foundation, https://zammad-foundation.org/ class Controllers::OnlineNotificationsControllerPolicy < Controllers::ApplicationControllerPolicy def show? own? end def update? own? end def destroy? own? end private def own? notification = OnlineNotification.find(record.params[:id]) notification.user_id == user.id end end