summaryrefslogtreecommitdiff
path: root/lib/solidus_subscriptions/permission_sets
AgeCommit message (Collapse)Author
2021-03-11Update permitted action names for Solidus v2.11Elia Schito
Under v2.11 :display won't be enough anymore for :show controller actions. The latter needs to be stated explicitly.
2020-10-21Fix DefaultCustomer permission set giving guests access to adminAlessandro Desantis
The DefaultCustomer permission set would allow guests to see the subscriptions list (although they wouldn't be able to see any subscriptions).
2020-10-09Fix DefaultCustomer permission set with CanCan 2Alessandro Desantis
CanCan 2 complains about not being able to merge abilities that use an ActiveRecord scope, so we need to use an SQL string instead.
2020-10-09Add a permission set for administratorsAlessandro Desantis
2020-10-08Add scope to subscription permissionsAlessandro Desantis
With an AR scope, `#accessible_by` can be properly used.
2020-10-08Use guest token to authorize API controller actionsAlessandro Desantis
2020-10-07Simplify line item management permissionsAlessandro Desantis
It isn't possible to manage line items through an order anymore, so we can greatly simplify the permission set.
2020-10-07Migrate ability to permission setsAlessandro Desantis
Custom abilities are deprecated in favor of the new permission sets API.