Module: ActiveScaffold::CancanBridge::ActiveRecord::SecurityMethods

Defined in:
lib/active_scaffold/bridges/cancan/lib/cancan_bridge.rb

Defined Under Namespace

Classes: InvalidArgument

Instance Method Summary collapse

Instance Method Details

#authorized_for_with_cancan?(options = {}) ⇒ Boolean

is usually called with :crud_type and :column, or :action

{:crud_type=>:update, :column=>"some_colum_name"}
{:action=>"edit"}

to allow access cancan must allow both :crud_type and :action if cancan says “no”, it delegates to default AS behavior

Returns:

  • (Boolean)

Raises:



91
92
93
94
95
96
97
98
99
100
101
102
 
# File 'lib/active_scaffold/bridges/cancan/lib/cancan_bridge.rb', line 91

def authorized_for_with_cancan?(options = {})
  raise InvalidArgument if options[:crud_type].blank? and options[:action].blank?
  if current_ability.present?
    crud_type_result = options[:crud_type].nil? ? true : current_ability.can?(options[:crud_type], self)
    action_result = options[:action].nil? ? true : current_ability.can?(options[:action].to_sym, self)
  else
    crud_type_result, action_result = false, false
  end
  default_result = authorized_for_without_cancan?(options)
  result = (crud_type_result && action_result) || default_result
  return result
end