Add failing example of cannot for attribute, corresponds to #406

2011-09-16 00:21:18 +02:00 · 2011-09-16 00:21:18 +02:00 · aa83fee7a4
commit aa83fee7a4
parent eafd6cfcde
1 changed files with 6 additions and 0 deletions
--- a/spec/cancan/ability_spec.rb
+++ b/spec/cancan/ability_spec.rb
@ -338,6 +338,12 @@ describe CanCan::Ability do
    @ability.can?(:read, 5..9).should be_false
  end

+  it "rejects permission only to a given attribute" do
+    @ability.can :update, :books
+    @ability.cannot :update, :books, :author
+    @ability.can?(:update, :books).should be_true
+    @ability.can?(:update, :books, :author).should be_false
+  end

  # Hash Association