rosa-build/app/policies/advisory_policy.rb

class AdvisoryPolicy < ApplicationPolicy

  def index?
    true
  end
  alias_method :search?, :index?
  alias_method :show?, :index?

  def create?
    !user.guest?
  end
  alias_method :update?, :create?

  # Public: Get list of parameters that the user is allowed to alter.
  #
  # Returns Array
  def permitted_attributes
    %i(
      description
      references
    )
  end

end