feat: CRUD operation for associated articles to current article (#4912)

app/policies/article_policy.rb

@@ -0,0 +1,31 @@
+class ArticlePolicy < ApplicationPolicy
+  def index?
+    @account_user.administrator? || @account.users.include?(@user)
+  end
+
+  def update?
+    @account_user.administrator? || portal_member?
+  end
+
+  def show?
+    @account_user.administrator? || portal_member?
+  end
+
+  def edit?
+    @account_user.administrator? || portal_member?
+  end
+
+  def create?
+    @account_user.administrator? || portal_member?
+  end
+
+  def destroy?
+    @account_user.administrator? || portal_member?
+  end
+
+  private
+
+  def portal_member?
+    @record.first.portal.members.include?(@user)
+  end
+end

app/policies/category_policy.rb

@@ -0,0 +1,31 @@
+class CategoryPolicy < ApplicationPolicy
+  def index?
+    @account_user.administrator? || @account.users.include?(@user)
+  end
+
+  def update?
+    @account_user.administrator? || portal_member?
+  end
+
+  def show?
+    @account_user.administrator? || portal_member?
+  end
+
+  def edit?
+    @account_user.administrator? || portal_member?
+  end
+
+  def create?
+    @account_user.administrator? || portal_member?
+  end
+
+  def destroy?
+    @account_user.administrator? || portal_member?
+  end
+
+  private
+
+  def portal_member?
+    @record.first.portal.members.include?(@user)
+  end
+end

app/policies/portal_policy.rb

@@ -0,0 +1,35 @@
+class PortalPolicy < ApplicationPolicy
+  def index?
+    @account_user.administrator? || @account.users.include?(@user)
+  end
+
+  def update?
+    @account_user.administrator?
+  end
+
+  def show?
+    @account_user.administrator? || portal_member?
+  end
+
+  def edit?
+    @account_user.administrator?
+  end
+
+  def create?
+    @account_user.administrator?
+  end
+
+  def destroy?
+    @account_user.administrator?
+  end
+
+  def add_members?
+    @account_user.administrator?
+  end
+
+  private
+
+  def portal_member?
+    @record.first.members.include?(@user)
+  end
+end