Adding institutions, complaints and users policies

app/controllers/complaints_controller.rb

 class ComplaintsController < ApplicationController
+  include Pundit
+
+  before_action :authorize_action
   before_action :authenticate_user!
 
   def create
@@ -20,4 +23,10 @@ class ComplaintsController < ApplicationController
   def complaint_params
     params.require(:complaint).permit(:complaintable_id, :complaintable_type, :complaint_reason_id, :description)
   end
+
+  def authorize_action
+    @complaint ||= Complaint.new(complaint_params)
+    authorize @complaint
+  end
+
 end

app/controllers/institutions_controller.rb

 class InstitutionsController < ApplicationController
+  include Pundit
+
   before_action :set_institution, only: [:show, :edit, :update, :destroy, :like, :users]
+  before_action :authorize_action
 
   # GET /institutions
   # GET /institutions.json
@@ -72,4 +75,9 @@ class InstitutionsController < ApplicationController
     params[:institution_object]
   end
 
+  def authorize_action
+    @institution ||= Institution.new
+    authorize @institution
+  end
+
 end

app/controllers/reviews_controller.rb

 class ReviewsController < ApplicationController
+  include Pundit
+
   before_action :authenticate_user!, except: [:show, :list]
   before_action :set_review, only: [:show, :destroy]
+  before_action :authorize_action
+
 
   def list
     if !params[:learning_object_id].blank?
@@ -81,4 +85,10 @@ class ReviewsController < ApplicationController
     when 'false' then false
     end
   end
+
+  def authorize_action
+    @review||= Review.new
+    authorize @review
+  end
+
 end

app/policies/collection_policy.rb

@@ -35,5 +35,4 @@ class CollectionPolicy < ApplicationPolicy
   def owner
     record.owner
   end
-
 end

app/policies/complaint_policy.rb

+class ComplaintPolicy < ApplicationPolicy
+
+  def create?
+    record if user_exists?
+  end
+end

app/policies/institution_policy.rb

+class InstitutionPolicy < ApplicationPolicy
+
+  def create?
+    record if user.is_admin?
+  end
+
+  def update?
+    record if user.is_admin?
+  end
+
+  def index?
+    record if user.is_admin?
+  end
+
+  def destroy?
+    record if user.is_admin?
+  end
+
+end

app/policies/review_policy.rb

+class ReviewPolicy < ApplicationPolicy
+
+  def create?
+    record if user_exists?
+  end
+
+  def update?
+    record if owns?
+  end
+
+  def destroy?
+    record if owns?
+  end
+
+  def rate?
+    record if user_exists?
+  end
+
+  def owner
+    record.users
+  end
+end

app/policies/user_policy.rb

+class UserPolicy < ApplicationPolicy
+  def show?
+    record if user_exists?
+  end
+
+  def list?
+    record
+  end
+
+  def follow?
+    record if user_exists?
+  end
+
+  def unfollow?
+    record if user_exists?
+  end
+end