class Ability::AclGroupAbility < Ability::BaseAbility
  def initialize(user)
    super
    if user.is_admin? || user.is_super_admin || user.machine_token_user? || user.is_tier_3? || user.is_tier_2?
      can :manage, AclGroup, :id => user.organisation.acl_groups.pluck(:id)
    else
      case user.role.try(:name)
      when "customer_care_devices_senior_experts"
        can :read, AclGroup, :id => user.organisation.acl_groups.pluck(:id)
      when "customer_care_devices_experts"
        can :read, AclGroup, :id => user.organisation.acl_groups.pluck(:id)
      when "customer_care_devices_specialists"
        can :read, AclGroup, :id => user.organisation.acl_groups.pluck(:id)
      when "vendor_techs"
        can :read, AclGroup, :id => user.organisation.acl_groups.pluck(:id)
      when "customer_care_general"
        can :read, AclGroup, :id => user.organisation.acl_groups.pluck(:id)
      when "nw_onboarding_techs"
        can :read, AclGroup, :id => user.organisation.acl_groups.pluck(:id)
      when "network_r&d"
        can :read, AclGroup, :id => user.organisation.acl_groups.pluck(:id)
      end
    end
  end
end