zammad/app/policies/upload_cache_policy.rb

# Copyright (C) 2012-2024 Zammad Foundation, https://zammad-foundation.org/

class UploadCachePolicy < ApplicationPolicy
  %i[
    add?
    any?
    attachments?
    destroy?
    remove_item?
    show?
  ].each do |action|
    define_method(action) { permission? }
  end

  private

  def permission?
    attachments = record.attachments
    return true if attachments.blank?

    attachments.first.created_by_id == user.id
  end
end