example pundit policy file

gistfile1.rb

class MessagePolicy < ApplicationPolicy
  def create?
    return true if user.admin?
    user.rooms.inlcude?(record.room)
  end

  def show?
    return true if user.admin?
    user.rooms.inlcude?(record.room)
  end

  def update?
    user.admin?
  end

  def delete?
    message.user == user
  end
end