2015-09-11 11:16:53 +00:00
|
|
|
class UserAbility
|
2015-09-08 15:18:38 +00:00
|
|
|
include CanCan::Ability
|
|
|
|
|
|
|
|
def initialize(user)
|
2015-09-09 14:56:55 +00:00
|
|
|
return unless user
|
2015-09-08 15:18:38 +00:00
|
|
|
|
2015-09-09 14:56:55 +00:00
|
|
|
can :manage, :all if user.penning?
|
2017-01-09 14:46:43 +00:00
|
|
|
can :read, user, id: user.id
|
|
|
|
can :manage, Request, user_id: user.id
|
2016-02-02 17:34:19 +00:00
|
|
|
can :create, Transaction do |t|
|
|
|
|
t.debtor == user && t.amount <= Rails.application.config.maximum_amount
|
|
|
|
end
|
2015-09-08 15:18:38 +00:00
|
|
|
end
|
|
|
|
end
|