2015-09-08 15:18:38 +00:00
|
|
|
class Ability
|
|
|
|
|
include CanCan::Ability
|
|
|
|
|
|
|
|
|
|
def initialize(user)
|
|
|
|
|
user ||= User.new # guest user (not logged in)
|
|
|
|
|
|
|
|
|
|
if user.penning?
|
|
|
|
|
can :manage, :all
|
|
|
|
|
else
|
|
|
|
|
can :read, user, id: user.id
|
2015-09-09 14:51:41 +00:00
|
|
|
can :create, Transaction, debtor: user
|
2015-09-08 15:18:38 +00:00
|
|
|
end
|
|
|
|
|
end
|
|
|
|
|
end
|
