class EventPolicy < EditOwnPolicy def owner? member == record.profile.member end class Scope < Scope # NOTE: Be explicit about which records you allow access to! # def resolve # scope.all # end end end