Contents

module Spree::Auth::Admin::Orders::CustomerDetailsControllerDecorator

  def self.prepended(base)
    base.before_action :check_authorization
  end

  private

  def check_authorization
    load_order
    session[:access_token] ||= params[:token]

    resource = @order
    action = params[:action].to_sym
    action = :edit if action == :show # show route renders :edit for this controller

    authorize! action, resource, session[:access_token]
  end
end
Spree::Admin::Orders::CustomerDetailsController.prepend(Spree::Auth::Admin::Orders::CustomerDetailsControllerDecorator)

Version data entries

5 entries across 5 versions & 1 rubygems

Version	Path
spree_auth_devise-4.6.3	lib/controllers/backend/spree/auth/admin/orders/customer_details_controller_decorator.rb
spree_auth_devise-4.6.2	lib/controllers/backend/spree/auth/admin/orders/customer_details_controller_decorator.rb
spree_auth_devise-4.6.1	lib/controllers/backend/spree/auth/admin/orders/customer_details_controller_decorator.rb
spree_auth_devise-4.6.0	lib/controllers/backend/spree/auth/admin/orders/customer_details_controller_decorator.rb
spree_auth_devise-4.5.0	lib/controllers/backend/spree/auth/admin/orders/customer_details_controller_decorator.rb