first cancan

app/controllers/application_controller.rb

@@ -3,16 +3,17 @@ class ApplicationController < ActionController::Base
   #before_action :check_installation
   protect_from_forgery with: :exception
 
-  helper_method :current_company,:current_login_employee
-
+  helper_method :current_company,:current_login_employee,:current_user
+   # alias_method :current_user, :current_login_employee,:current_user
   #this is base api base controller to need to inherit.
   #all token authentication must be done here
   #response format must be set to JSON
 
-  # rescue_from CanCan::AccessDenied do |exception|
-  #   flash[:warning] = exception.message
-  #   redirect_to root_path
-  # end
+
+  rescue_from CanCan::AccessDenied do |exception|
+    flash[:warning] = exception.message
+    redirect_to root_path
+  end
 
   def current_user
     @current_user ||= Employee.find_by_token_session(session[:session_token]) if session[:session_token]

app/controllers/base_origami_controller.rb

@@ -5,5 +5,14 @@ class BaseOrigamiController < ActionController::Base
   #before_action :check_installation
   protect_from_forgery with: :exception
 
+  rescue_from CanCan::AccessDenied do |exception|
+    flash[:warning] = exception.message
+    redirect_to root_path
+  end
+
+  def current_user
+    @current_user ||= Employee.find_by_token_session(session[:session_token]) if session[:session_token]
+  end
+
 
 end

app/controllers/origami/customers_controller.rb

@@ -1,8 +1,6 @@
 class Origami::CustomersController < BaseOrigamiController
-  #Form to add customer -
+  load_and_authorize_resource
   def index
-    
-  
   end
 
   # GET /crm/customers/1

app/controllers/origami/request_bills_controller.rb

@@ -1,4 +1,5 @@
 class Origami::RequestBillsController < BaseOrigamiController
+  load_and_authorize_resource
   # Print Request Bill and add to sale tables
   def print
     @sale = Sale.new

app/controllers/settings/employees_controller.rb

@@ -1,5 +1,5 @@
 class Settings::EmployeesController < ApplicationController
-  # load_and_authorize_resource
+  load_and_authorize_resource
   before_action :set_employee, only: [:show, :edit, :update, :destroy]