Adapts AccountController to new permissions system

2015-08-10 15:10:47 +02:00
parent c1c1362780
commit ce27a6f2ea
4 changed files with 18 additions and 6 deletions
--- a/app/controllers/account_controller.rb
+++ b/app/controllers/account_controller.rb
@@ -1,7 +1,7 @@
 class AccountController < ApplicationController

-  before_action :authenticate_user!
  before_action :set_account
+  load_and_authorize_resource class: "User"

  def show
  end
--- a/app/models/ability.rb
+++ b/app/models/ability.rb
@@ -6,6 +6,8 @@ class Ability
    can :read, Debate

    if user # logged-in users
+      can [:read, :update], User, id: user.id
+
      can [:read, :create, :vote], Debate
      can :update, Debate do |debate|
        debate.editable_by?(user)