activitypub-academy/app/policies/settings_policy.rb