Contents

Spree::Admin::Orders::CustomerDetailsController.class_eval do
  before_action :check_authorization

  private

  def check_authorization
    load_order
    session[:access_token] ||= params[:token]

    resource = @order
    action = params[:action].to_sym
    action = :edit if action == :show # show route renders :edit for this controller

    authorize! action, resource, session[:access_token]
  end
end

Version data entries

11 entries across 11 versions & 1 rubygems

Version	Path
spree_auth_devise-3.5.2	lib/controllers/backend/spree/admin/orders/customer_details_controller_decorator.rb
spree_auth_devise-3.5.1	lib/controllers/backend/spree/admin/orders/customer_details_controller_decorator.rb
spree_auth_devise-3.5.0	lib/controllers/backend/spree/admin/orders/customer_details_controller_decorator.rb
spree_auth_devise-3.4.2	lib/controllers/backend/spree/admin/orders/customer_details_controller_decorator.rb
spree_auth_devise-3.4.1	lib/controllers/backend/spree/admin/orders/customer_details_controller_decorator.rb
spree_auth_devise-3.4.0	lib/controllers/backend/spree/admin/orders/customer_details_controller_decorator.rb
spree_auth_devise-3.3.3	lib/controllers/backend/spree/admin/orders/customer_details_controller_decorator.rb
spree_auth_devise-3.3.1	lib/controllers/backend/spree/admin/orders/customer_details_controller_decorator.rb
spree_auth_devise-3.3.0	lib/controllers/backend/spree/admin/orders/customer_details_controller_decorator.rb
spree_auth_devise-3.3.0.rc1	lib/controllers/backend/spree/admin/orders/customer_details_controller_decorator.rb
spree_auth_devise-3.2.0	lib/controllers/backend/spree/admin/orders/customer_details_controller_decorator.rb