Age | Commit message (Collapse) | Author |
|
Under v2.11 :display won't be enough anymore for :show controller
actions. The latter needs to be stated explicitly.
|
|
The DefaultCustomer permission set would allow guests to see the
subscriptions list (although they wouldn't be able to see any subscriptions).
|
|
CanCan 2 complains about not being able to merge abilities that use
an ActiveRecord scope, so we need to use an SQL string instead.
|
|
|
|
With an AR scope, `#accessible_by` can be properly used.
|
|
|
|
It isn't possible to manage line items through an order anymore, so
we can greatly simplify the permission set.
|
|
Custom abilities are deprecated in favor of the new permission sets
API.
|