From 5fa1bd8a6f9a5f3dce7817dbbc88a88d874b3628 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Sen=C3=A9n=20Rodero=20Rodr=C3=ADguez?= Date: Wed, 8 May 2019 12:08:26 +0200 Subject: [PATCH] Allow administrator users the ability to manage all LocalCensusRecords Also check that other kind of users are not able to manage LocalCensusRecords. --- app/models/abilities/administrator.rb | 2 ++ spec/models/abilities/administrator_spec.rb | 2 ++ spec/models/abilities/common_spec.rb | 2 ++ spec/models/abilities/everyone_spec.rb | 1 + 4 files changed, 7 insertions(+) diff --git a/app/models/abilities/administrator.rb b/app/models/abilities/administrator.rb index 6fcee6cc0..7b27311be 100644 --- a/app/models/abilities/administrator.rb +++ b/app/models/abilities/administrator.rb @@ -103,6 +103,8 @@ module Abilities can [:manage], Dashboard::AdministratorTask can [:edit, :update], DownloadSetting + + can :manage, LocalCensusRecord end end end diff --git a/spec/models/abilities/administrator_spec.rb b/spec/models/abilities/administrator_spec.rb index 575a34744..834a8d397 100644 --- a/spec/models/abilities/administrator_spec.rb +++ b/spec/models/abilities/administrator_spec.rb @@ -95,4 +95,6 @@ describe Abilities::Administrator do it { is_expected.to be_able_to :manage, Dashboard::AdministratorTask } it { is_expected.to be_able_to :manage, dashboard_administrator_task } + + it { should be_able_to(:manage, LocalCensusRecord) } end diff --git a/spec/models/abilities/common_spec.rb b/spec/models/abilities/common_spec.rb index d30c7ddfc..9e7b75b3f 100644 --- a/spec/models/abilities/common_spec.rb +++ b/spec/models/abilities/common_spec.rb @@ -95,6 +95,8 @@ describe Abilities::Common do it { should_not be_able_to(:destroy, budget_investment_image) } it { should_not be_able_to(:manage, Dashboard::Action) } + it { should_not be_able_to(:manage, LocalCensusRecord) } + describe "flagging content" do it { should be_able_to(:flag, debate) } it { should be_able_to(:unflag, debate) } diff --git a/spec/models/abilities/everyone_spec.rb b/spec/models/abilities/everyone_spec.rb index 36fc20281..b9af82cf9 100644 --- a/spec/models/abilities/everyone_spec.rb +++ b/spec/models/abilities/everyone_spec.rb @@ -27,6 +27,7 @@ describe Abilities::Everyone do it { should be_able_to(:index, Budget) } it { should_not be_able_to(:manage, Dashboard::Action) } + it { should_not be_able_to(:manage, LocalCensusRecord) } context "when accessing poll results" do let(:results_enabled) { true }