Contents

Spree::Admin::OrdersController.class_eval do
  before_filter :check_authorization

  private
    def check_authorization
      load_order
      session[:access_token] ||= params[:token]

      resource = @order || Spree::Order.new
      action = params[:action].to_sym

      authorize! action, resource, session[:access_token]
    end
end

Version data entries

10 entries across 10 versions & 2 rubygems

Version	Path
spree_auth-1.1.5	app/controllers/spree/admin/admin_orders_controller_decorator.rb
spree_auth_devise-1.3.1	app/controllers/spree/admin/admin_orders_controller_decorator.rb
spree_auth_devise-1.2.0	app/controllers/spree/admin/admin_orders_controller_decorator.rb
spree_auth_devise-1.0.1	app/controllers/spree/admin/admin_orders_controller_decorator.rb
spree_auth-1.1.4	app/controllers/spree/admin/admin_orders_controller_decorator.rb
spree_auth_devise-1.0.0	app/controllers/spree/admin/admin_orders_controller_decorator.rb
spree_auth-1.1.3	app/controllers/spree/admin/admin_orders_controller_decorator.rb
spree_auth-1.1.2	app/controllers/spree/admin/admin_orders_controller_decorator.rb
spree_auth-1.1.2.rc1	app/controllers/spree/admin/admin_orders_controller_decorator.rb
spree_auth-1.1.1	app/controllers/spree/admin/admin_orders_controller_decorator.rb