Contents

module SocialStream
  class Ability
    include CanCan::Ability

    def initialize(user)
      can :create, Activity do |a|
        # All ties' authors must be the user
        a.tie.receiver_subject == user &&
          a.tie.allows?(user, 'create', 'activity')
      end

      can :read, Activity do |a|
        # This condition would not be neccesary if every actor had a public tie with others
        a.tie.relation.name == 'public' ||
          a.tie.allows?(user, 'read', 'activity')
      end

      can :update, Activity do |a|
        a.tie.allows?(user, 'update', 'activity')
      end

      can :destroy, Activity do |a|
        a.tie.allows?(user, 'destroy', 'activity')
      end
    end
  end
end

Version data entries

2 entries across 2 versions & 1 rubygems

Version	Path
social_stream-0.3.1	lib/social_stream/ability.rb
social_stream-0.3.0	lib/social_stream/ability.rb