Contents

Spree::OrdersController.class_eval do
  before_filter :check_authorization

  private
    def check_authorization
      session[:access_token] ||= params[:token]
      order = Spree::Order.find_by_number(params[:id]) || current_order

      if order
        authorize! :edit, order, session[:access_token]
      else
        authorize! :create, Spree::Order.new
      end
    end
end

Version data entries

6 entries across 6 versions & 2 rubygems

Version	Path
spree_auth_devise-1.3.1	app/controllers/spree/orders_controller_decorator.rb
spree_auth_devise-1.2.0	app/controllers/spree/orders_controller_decorator.rb
spree_auth_devise-1.0.1	app/controllers/spree/orders_controller_decorator.rb
spree_auth_devise-1.0.0	app/controllers/spree/orders_controller_decorator.rb
spree_auth-1.1.2.rc1	app/controllers/spree/orders_controller_decorator.rb
spree_auth-1.1.1	app/controllers/spree/orders_controller_decorator.rb