update crm

app/controllers/application_controller.rb

@@ -8,6 +8,16 @@ class ApplicationController < ActionController::Base
   #this is base api base controller to need to inherit.
   #all token authentication must be done here
   #response format must be set to JSON
+
+  # rescue_from CanCan::AccessDenied do |exception|
+  #   flash[:warning] = exception.message
+  #   redirect_to root_path
+  # end
+
+  def current_user
+    @current_user ||= Employee.find_by_token_session(session[:session_token]) if session[:session_token]
+  end
+
   def current_company
     begin
      return Company.first

app/controllers/crm/customers_controller.rb

@@ -46,14 +46,14 @@ class Crm::CustomersController < BaseCrmController
     end
 
     #get customer amount
-      # @customer       = Customer.find(params[:id])
-      # response        = Customer.get_member_account(@customer)
+      @customer       = Customer.find(params[:id])
+      response        = Customer.get_member_account(@customer)
 
-      # if(response["status"] == true)
-      #   @membership = response["data"]
-      # else
+      if(response["status"] == true)
+        @membership = response["data"]
+      else
         @membership = 0
-      # end
+      end
 
       #end customer amount
 

app/controllers/reports/receipt_no_controller.rb

@@ -1,4 +1,5 @@
 class Reports::ReceiptNoController < BaseReportController	  
+	load_and_authorize_resource
 	def index
 		from, to = get_date_range_from_params
 		puts "from..."

app/controllers/reports/sale_item_controller.rb

@@ -1,5 +1,5 @@
 class Reports::SaleItemController < BaseReportController
-
+	load_and_authorize_resource
   def index
       
       from, to, report_type  = get_date_range_from_params

app/controllers/settings/employees_controller.rb

@@ -1,6 +1,8 @@
 class Settings::EmployeesController < ApplicationController
+  # load_and_authorize_resource
   before_action :set_employee, only: [:show, :edit, :update, :destroy]
 
+
   # GET /employees
   # GET /employees.json
   def index

app/models/ability.rb

@@ -0,0 +1,33 @@
+class Ability
+  include CanCan::Ability
+
+  def initialize(user)
+    user ||= Employee.new
+
+    if user.role? :administrator
+
+        can :manage, :all
+
+    elsif user.role? :cashier
+      can :read, Order
+      can :update, Order
+      can :completed_order_item, Order 
+      
+      can :read, Sale  
+      can :update, Sale      
+      
+                                               
+    elsif user.role? :accountant
+
+      can :read, Order
+      can :update, Order
+      can :completed_order_item, Order
+
+      can :read, Sale
+      can :update, Sale
+      can :manual_complete_sale, Sale      
+
+    end
+
+  end
+end