Contents

# frozen_string_literal: true

module Spree::Admin::Orders::CustomerDetailsControllerDecorator
  def self.prepended(base)
    base.before_action :check_authorization
  end

  private

  def check_authorization
    load_order
    session[:access_token] ||= params[:token]

    resource = @order
    action = params[:action].to_sym
    action = :edit if action == :show # show route renders :edit for this controller

    authorize! action, resource, session[:access_token]
  end

  Spree::Admin::Orders::CustomerDetailsController.prepend self
end

Version data entries

11 entries across 11 versions & 1 rubygems

Version	Path
solidus_auth_devise-2.5.9	lib/decorators/backend/controllers/spree/admin/orders/customer_details_controller_decorator.rb
solidus_auth_devise-2.5.8	lib/decorators/backend/controllers/spree/admin/orders/customer_details_controller_decorator.rb
solidus_auth_devise-2.5.7	lib/decorators/backend/controllers/spree/admin/orders/customer_details_controller_decorator.rb
solidus_auth_devise-2.5.6	lib/decorators/backend/controllers/spree/admin/orders/customer_details_controller_decorator.rb
solidus_auth_devise-2.5.5	lib/decorators/backend/controllers/spree/admin/orders/customer_details_controller_decorator.rb
solidus_auth_devise-2.5.4	lib/decorators/backend/controllers/spree/admin/orders/customer_details_controller_decorator.rb
solidus_auth_devise-2.5.3	lib/decorators/backend/controllers/spree/admin/orders/customer_details_controller_decorator.rb
solidus_auth_devise-2.5.2	lib/decorators/backend/controllers/spree/admin/orders/customer_details_controller_decorator.rb
solidus_auth_devise-2.5.1	lib/decorators/backend/controllers/spree/admin/orders/customer_details_controller_decorator.rb
solidus_auth_devise-2.5.0	lib/decorators/backend/controllers/spree/admin/orders/customer_details_controller_decorator.rb
solidus_auth_devise-2.4.0	lib/controllers/backend/spree/admin/orders/customer_details_controller_decorator.rb