ability to share template with testing account

lib/abilities/template_conditions.rb

@@ -0,0 +1,27 @@
+# frozen_string_literal: true
+
+module Abilities
+  module TemplateConditions
+    module_function
+
+    def collection(user, ability: nil)
+      shared_ids =
+        Template.joins(:template_sharings)
+                .where(template_sharings: { ability:,
+                                            account_id: [user.account_id, TemplateSharing::ALL_ID] }.compact)
+                .select(:id)
+
+      Template.where(account_id: user.account_id).or(Template.where(id: shared_ids))
+    end
+
+    def entity(template, user:, ability: nil)
+      return true if template.account_id == user.account_id
+
+      account_ids = [user.account_id, TemplateSharing::ALL_ID]
+
+      template.template_sharings.any? do |e|
+        e.account_id.in?(account_ids) && (ability.nil? || e.ability == ability)
+      end
+    end
+  end
+end

lib/ability.rb

@@ -5,7 +5,14 @@ class Ability
 
   def initialize(user)
     can :manage, Template, account_id: user.account_id
+
+    can %i[read update create], Template,
+        Abilities::TemplateConditions.collection(user) do |template|
+      Abilities::TemplateConditions.entity(template, user:, ability: 'manage')
+    end
+
     can :manage, TemplateFolder, account_id: user.account_id
+    can :manage, TemplateSharing, template: { account_id: user.account_id }
     can :manage, Submission, account_id: user.account_id
     can :manage, Submitter, submission: { account_id: user.account_id }
     can :manage, User, account_id: user.account_id