2015-09-11 13:16:53 +02:00
|
|
|
class ClientAbility
|
2015-09-09 11:24:45 +02:00
|
|
|
include CanCan::Ability
|
|
|
|
|
|
|
|
def initialize(client)
|
|
|
|
client ||= Client.new # guest user (not logged in)
|
2017-01-23 16:59:04 +01:00
|
|
|
|
|
|
|
can :create, Transaction if client.has_role? :create_transactions
|
|
|
|
can :create, Request
|
2017-01-23 17:45:57 +01:00
|
|
|
can :read, User
|
2015-09-09 11:24:45 +02:00
|
|
|
end
|
|
|
|
end
|