git_admin/sx-fc
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

first cancan

Browse Source
This commit is contained in:
Aung Myo
2017-06-22 15:33:55 +06:30
parent 3d838bc989
commit 25b6a893f2
6 changed files with 26 additions and 16 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
app/controllers/application_controller.rb
View File

@@ -3,16 +3,17 @@ class ApplicationController < ActionController::Base
#before_action :check_installation #before_action :check_installation
protect_from_forgery with: :exception protect_from_forgery with: :exception
helper_method :current_company,:current_login_employee helper_method :current_company,:current_login_employee,:current_user
# alias_method :current_user, :current_login_employee,:current_user
#this is base api base controller to need to inherit. #this is base api base controller to need to inherit.
#all token authentication must be done here #all token authentication must be done here
#response format must be set to JSON #response format must be set to JSON
# rescue_from CanCan::AccessDenied do |exception|
# flash[:warning] = exception.message rescue_from CanCan::AccessDenied do |exception|
# redirect_to root_path flash[:warning] = exception.message
# end redirect_to root_path
end
def current_user def current_user
@current_user ||= Employee.find_by_token_session(session[:session_token]) if session[:session_token] @current_user ||= Employee.find_by_token_session(session[:session_token]) if session[:session_token]

9
app/controllers/base_origami_controller.rb
View File

@@ -5,5 +5,14 @@ class BaseOrigamiController < ActionController::Base
#before_action :check_installation #before_action :check_installation
protect_from_forgery with: :exception protect_from_forgery with: :exception
rescue_from CanCan::AccessDenied do |exception|
flash[:warning] = exception.message
redirect_to root_path
end
def current_user
@current_user ||= Employee.find_by_token_session(session[:session_token]) if session[:session_token]
end
end end

4
app/controllers/origami/customers_controller.rb
View File

@@ -1,8 +1,6 @@
class Origami::CustomersController < BaseOrigamiController class Origami::CustomersController < BaseOrigamiController
#Form to add customer - load_and_authorize_resource
def index def index
end end
# GET /crm/customers/1 # GET /crm/customers/1

1
app/controllers/origami/request_bills_controller.rb
View File

@@ -1,4 +1,5 @@
class Origami::RequestBillsController < BaseOrigamiController class Origami::RequestBillsController < BaseOrigamiController
load_and_authorize_resource
# Print Request Bill and add to sale tables # Print Request Bill and add to sale tables
def print def print
@sale = Sale.new @sale = Sale.new

2
app/controllers/settings/employees_controller.rb
View File

@@ -1,5 +1,5 @@
class Settings::EmployeesController < ApplicationController class Settings::EmployeesController < ApplicationController
# load_and_authorize_resource load_and_authorize_resource
before_action :set_employee, only: [:show, :edit, :update, :destroy] before_action :set_employee, only: [:show, :edit, :update, :destroy]

13
app/models/ability.rb
View File

@@ -4,20 +4,22 @@ class Ability
def initialize(user) def initialize(user)
user ||= Employee.new user ||= Employee.new
if user.role? :administrator if user.role == "administrator"
can :manage, :all can :manage, :all
elsif user.role? :cashier elsif user.role == "cashier"
can :read, Order can :read, Order
can :update, Order can :update, Order
can :completed_order_item, Order
can :read, Sale can :read, Sale
can :update, Sale can :update, Sale
can :add_customer, Customer
can :update_sale_by_customer, Customer
elsif user.role? :accountant elsif user.role == "accountant"
can :read, Order can :read, Order
can :update, Order can :update, Order
@@ -28,6 +30,5 @@ class Ability
can :manual_complete_sale, Sale can :manual_complete_sale, Sale
end end
end end
end end