add cancan for authorization

2023-09-17 00:45:57 +03:00
parent f89c50d096
commit 2f1843151d
58 changed files with 343 additions and 186 deletions
@@ -1,12 +1,16 @@
 # frozen_string_literal: true

 class PersonalizationSettingsController < ApplicationController
-  def show; end
+  def show
+    authorize!(:read, AccountConfig)
+  end

  def create
    account_config =
      current_account.account_configs.find_or_initialize_by(key: encrypted_config_params[:key])

+    authorize!(:create, account_config)
+
    account_config.update!(encrypted_config_params)

    redirect_back(fallback_location: settings_personalization_path, notice: 'Settings have been saved.')