One policy for all

[Sahar-Remodeling]

I have large number of controllers/module and I need one policy (applicationPolicy) to handle their common actions. Do I need to create a policy class for each controller (record)?

[wayne5540]

You can simply override policy(record)

ex:

class ApplicationController < ActionController::Base
  include Pundit
  # ...
  private

  def policy(record)
    policies[record] ||= ApplicationPolicy.new(pundit_user, record)
  end
end

[tom-lord]

...But in general, I would recommend creating blank policies for each model.

This makes it clear to other developers that there is no special behaviour (without having to unpick how you've over-ridden the policy class). It also makes the code easy/obvious how to change in future, when special rules do need to apply for a model.

In addition, note that blank policy classes will be auto-generated when you create a new model via rails generate.