Authorize Teams with Pundit

posts_controller.rb

# app/controllers/posts_controller.rb
def show
  raise Pundit::NotAuthorizedError unless PostPolicy.new(current_team, @post).show?
end

posts_policy.rb

# app/policies/post_policy.rb
class PostPolicy < ApplicationPolicy
  
  # Rename attributes for clarity
  attr_reader :team, :record
  
  def initialize(team, record)
    @team       = team
    @record     = record
  end

  def show?
    team.has_access_to_feature?
  end
end