Allow guests to edit their subss line items

Previously the ability assumed that all subscription_line_items would
have a user through the order. This however is not the case since the
user login is not enforced until after the user tries to transition out
of the cart step.

Allow guests to edit their line items if the line item matches the
current checkout_id (order guest token )

1 files changed, 4 insertions, 1 deletions

diff --git a/lib/solidus_subscriptions/ability.rb b/lib/solidus_subscriptions/ability.rb
index 37c8206..5a16f9e 100644
--- a/lib/solidus_subscriptions/ability.rb
+++ b/lib/solidus_subscriptions/ability.rb
@@ -3,7 +3,10 @@ module SolidusSubscriptions
     include CanCan::Ability
 
     def initialize(user)
-      can(:manage, LineItem) { |li| li.order.user == user }
+      can(:manage, LineItem) do |li, order|
+        li.order.user == user || li.order == order
+      end
+
       can(:manage, Subscription) { |s| s.user == user }
     end
   end