Sha256: 2585704b4509367943a613ff7d388845038108d7cd17812249ef361515cf739d
Contents?: true
Size: 1.99 KB
Versions: 48
Compression:
Stored size: 1.99 KB
Contents
# frozen_string_literal: true
# Implementation class for Cancan gem. Instead of overriding this class, consider adding new permissions
# using the special +register_ability+ method which allows extensions to add their own abilities.
#
# See http://github.com/ryanb/cancan for more details on cancan.
require 'cancan'
module Spree
class Ability
include CanCan::Ability
class_attribute :abilities
self.abilities = Set.new
attr_reader :user
# Allows us to go beyond the standard cancan initialize method which makes it difficult for engines to
# modify the default +Ability+ of an application. The +ability+ argument must be a class that includes
# the +CanCan::Ability+ module. The registered ability should behave properly as a stand-alone class
# and therefore should be easy to test in isolation.
def self.register_ability(ability)
abilities.add(ability)
end
def self.remove_ability(ability)
abilities.delete(ability)
end
def initialize(current_user)
@user = current_user || Spree.user_class.new
alias_actions
activate_permission_sets
register_extension_abilities
end
private
def alias_actions
clear_aliased_actions
# override cancan default aliasing (we don't want to differentiate between read and index)
alias_action :delete, to: :destroy
alias_action :edit, to: :update
alias_action :new, to: :create
alias_action :new_action, to: :create
alias_action :show, to: :read
alias_action :index, :read, to: :display
end
# Before, this was the only way to extend this ability. Permission sets have been added since.
# It is recommended to use them instead for extension purposes if possible.
def register_extension_abilities
Ability.abilities.each do |clazz|
ability = clazz.send(:new, user)
merge(ability)
end
end
def activate_permission_sets
Spree::Config.roles.activate_permissions! self, user
end
end
end
Version data entries
48 entries across 48 versions & 2 rubygems