Sha256: 97a08578d7fa4e33998163beb45014efd146379c7d4e05561beba448b53dcc67

Contents?: true

Size: 384 Bytes

Versions: 6

Compression:

Stored size: 384 Bytes

Contents

Spree::OrdersController.class_eval do
  before_filter :check_authorization

  private
    def check_authorization
      session[:access_token] ||= params[:token]
      order = Spree::Order.find_by_number(params[:id]) || current_order

      if order
        authorize! :edit, order, session[:access_token]
      else
        authorize! :create, Spree::Order.new
      end
    end
end

Version data entries

6 entries across 6 versions & 2 rubygems

Version Path
spree_auth_devise-1.3.1 app/controllers/spree/orders_controller_decorator.rb
spree_auth_devise-1.2.0 app/controllers/spree/orders_controller_decorator.rb
spree_auth_devise-1.0.1 app/controllers/spree/orders_controller_decorator.rb
spree_auth_devise-1.0.0 app/controllers/spree/orders_controller_decorator.rb
spree_auth-1.1.2.rc1 app/controllers/spree/orders_controller_decorator.rb
spree_auth-1.1.1 app/controllers/spree/orders_controller_decorator.rb