// @flow import policy from './policy'; import { NotificationSetting, User } from '../models'; const { allow } = policy; allow(User, 'create', NotificationSetting); allow( User, ['read', 'update', 'delete'], NotificationSetting, (user, setting) => user && user.id === setting.userId );