user_policy.rb

class UserPolicy < ApplicationPolicy
  def index?
    logged_in?
  end

  def show?
    true
  end

  def create?
    false
  end

  def update?
    false
  end

  def destroy?
    false
  end

  class Scope < Scope
    def resolve
      scope
    end
  end
end