React Pundit

policies-CommentPolicy.js

export default function checkCommentPolicy(action, comment, user) {
  switch (action) {
    case 'delete':
    case 'edit':
      return comment.user.id === user.id;
    case 'create':
      return user.role === 'user';
    default:
      return false;
  }
};

policies-index.js

import checkCommentPolicy from './CommentPolicy';

import { toUpper } from 'lodash';

export const meetsPolicy = (type, action, obj, user) => {
  if (user.role === 'admin') { return true; }
  switch (toUpper(type)) {
    case 'COMMENT':
      return checkCommentPolicy(action, obj, user);
    default:
      return false;
  }
}

VisibleToUser.js

require('./styles.css');

import React, {Component, PropTypes} from 'react';
import { connect } from 'react-redux';
import { meetsPolicy } from 'policies';

class VisibleToUser extends Component {

  render() {
    let { children, hasUser, type, value, user, action } = this.props;

    if (hasUser && meetsPolicy(type, action, value, user)) {
      return children;
    }
    return (<span style={{ display: 'none' }}></span>);
  }

  static displayName = 'VisibleToUser';

  static propTypes = {
    children: PropTypes.any.isRequired,
    type: PropTypes.string.isRequired,
    value: PropTypes.any.isRequired,
    action: PropTypes.string.isRequired,
  };

}

export default connect((state) => ({
      user: state.session.user,
      hasUser: typeof state.session.user !== 'undefined'
    }))(VisibleToUser);