Only created expenses.

osohq · Dec 10, 2020 · eb2586f · eb2586f
1 parent 972fa73
commit eb2586f
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/app/policy.polar b/app/policy.polar
@@ -1,2 +1,4 @@
-allow(_: User, "read", _: Expense);
+allow(user: User, "read", expense: Expense) if
+    expense.created_by = user;
+
 allow(_: User, "read", _: User);