cst1/openstreetmap-website
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Authorize actions on GeocoderController with CanCanCan Ability

Browse source
This commit is contained in:
Benjamin Reynolds 2018-06-10 12:09:32 -04:00 • committed by Chris Flipse
parent 464c7f863e
commit 4d20a2c96a
2 changed files with 12 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

3
app/models/ability.rb
View file

@ -9,6 +9,9 @@ class Ability
can [:list, :rss, :view, :comments], DiaryEntry can [:list, :rss, :view, :comments], DiaryEntry
can [:search, :search_latlon, :search_ca_postcode, :search_osm_nominatim,
:search_geonames, :search_osm_nominatim_reverse, :search_geonames_reverse], :geocoder
if user if user
can :weclome, :site can :weclome, :site

9
test/models/abilities_test.rb
View file

@ -16,6 +16,15 @@ end
class GuestAbilityTest < AbilityTest class GuestAbilityTest < AbilityTest
test "geocoder permission for a guest" do
ability = Ability.new nil, tokens
[:search, :search_latlon, :search_ca_postcode, :search_osm_nominatim,
:search_geonames, :search_osm_nominatim_reverse, :search_geonames_reverse].each do |action|
assert ability.can?(action, :geocoder), "should be able to #{action} geocoder"
end
end
test "diary permissions for a guest" do test "diary permissions for a guest" do
ability = Ability.new nil, tokens ability = Ability.new nil, tokens
[:list, :rss, :view, :comments].each do |action| [:list, :rss, :view, :comments].each do |action|