Sha256: b7eb7aef3bdf62f3b7f73f5f62d37fb5a59918a122ef48e417228d3cb5b2d272

Contents?: true

Size: 565 Bytes

Versions: 11

Compression:

Stored size: 565 Bytes

Contents

Spree::Admin::OrdersController.class_eval do
  before_action :check_authorization

  private

  def load_order_action
    [:edit, :update, :cancel, :resume, :approve, :resend, :open_adjustments, :close_adjustments, :cart]
  end

  def check_authorization
    action = params[:action].to_sym
    if load_order_action.include?(action)
      load_order
      session[:access_token] ||= params[:token]
      resource = @order || Spree::Order.new
      authorize! action, resource, session[:access_token]
    else
      authorize! :index, Spree::Order
    end
  end
end

Version data entries

11 entries across 11 versions & 1 rubygems

Version Path
spree_auth_devise-3.5.2 lib/controllers/backend/spree/admin/admin_orders_controller_decorator.rb
spree_auth_devise-3.5.1 lib/controllers/backend/spree/admin/admin_orders_controller_decorator.rb
spree_auth_devise-3.5.0 lib/controllers/backend/spree/admin/admin_orders_controller_decorator.rb
spree_auth_devise-3.4.2 lib/controllers/backend/spree/admin/admin_orders_controller_decorator.rb
spree_auth_devise-3.4.1 lib/controllers/backend/spree/admin/admin_orders_controller_decorator.rb
spree_auth_devise-3.4.0 lib/controllers/backend/spree/admin/admin_orders_controller_decorator.rb
spree_auth_devise-3.3.3 lib/controllers/backend/spree/admin/admin_orders_controller_decorator.rb
spree_auth_devise-3.3.1 lib/controllers/backend/spree/admin/admin_orders_controller_decorator.rb
spree_auth_devise-3.3.0 lib/controllers/backend/spree/admin/admin_orders_controller_decorator.rb
spree_auth_devise-3.3.0.rc1 lib/controllers/backend/spree/admin/admin_orders_controller_decorator.rb
spree_auth_devise-3.2.0 lib/controllers/backend/spree/admin/admin_orders_controller_decorator.rb