From f3a05d64c1713dcbaa3ed258f74c9f334dded220 Mon Sep 17 00:00:00 2001 From: Will Bradley Date: Sun, 2 Sep 2012 04:45:42 -0700 Subject: [PATCH] Adding ability authorizing in cancan --- app/controllers/door_logs_controller.rb | 1 + app/controllers/users_controller.rb | 1 + app/models/ability.rb | 3 +++ 3 files changed, 5 insertions(+) diff --git a/app/controllers/door_logs_controller.rb b/app/controllers/door_logs_controller.rb index 792cf6f..d9b8fd3 100644 --- a/app/controllers/door_logs_controller.rb +++ b/app/controllers/door_logs_controller.rb @@ -1,4 +1,5 @@ class DoorLogsController < ApplicationController + authorize_resource before_filter :authenticate_user! # GET /door_logs diff --git a/app/controllers/users_controller.rb b/app/controllers/users_controller.rb index ffdcbeb..fa98ee3 100644 --- a/app/controllers/users_controller.rb +++ b/app/controllers/users_controller.rb @@ -1,4 +1,5 @@ class UsersController < ApplicationController + authorize_resource before_filter :authenticate_user! # GET /users diff --git a/app/models/ability.rb b/app/models/ability.rb index 58929d7..8575aa4 100644 --- a/app/models/ability.rb +++ b/app/models/ability.rb @@ -2,6 +2,9 @@ class Ability include CanCan::Ability def initialize(user) + can :manage, User do |u| + u.id == user.id + end # Define abilities for the passed in user here. For example: # # user ||= User.new # guest user (not logged in)