policies and auto review builds

app/policies/reviewer_vote_policy.rb

@@ -8,21 +8,26 @@ class ReviewerVotePolicy < ApplicationPolicy
   # Only Managers, and Admins, can veto a quiz result
 
   def up?
-    # return true if user.reviewees.include? record.candidate
-    true
+    return true if user.acts_as_admin?
+    return false unless record.candidate.reviewers.include? user
+    user.acts_as_reviewer?
   end
 
   def down?
-    # return true if user.acts_as_manager?
-    # user.quizzes.include? record
-    true
+    return true if user.acts_as_admin?
+    return false unless record.candidate.reviewers.include? user
+    user.acts_as_reviewer?
   end
 
   def approve?
+    return true if user.acts_as_admin?
+    return false unless record.candidate.reviewers.include? user
     user.acts_as_manager?
   end
 
   def decline?
+    return true if user.acts_as_admin?
+    return false unless record.candidate.reviewers.include? user
     user.acts_as_manager?
   end