customer_vault 1.1.0 → 1.2.0

data/app/assets/stylesheets/customer_vault/application.css.scss

@@ -66,4 +66,10 @@ ul {
     margin-bottom: 0;
 }
 
+.fa{
+  @extend .fa-fw;
+}
 
+.individual-icon, .corporation-icon{
+  font-size: 275%;
+}

data/app/controllers/customer_vault/application_controller.rb

@@ -1,4 +1,9 @@
+require "cancan"
+
 module CustomerVault
   class ApplicationController < ::ApplicationController
+    def current_ability
+      @current_ability ||= CustomerVault::Ability.new(nil)
+    end
   end
 end

data/app/controllers/customer_vault/corporations_controller.rb

@@ -6,21 +6,28 @@ module CustomerVault
 
     # GET /corporations/1
     def show
+      authorize! :read, @corporation
     end
 
     # GET /corporations/new
     def new
+      authorize! :create, CustomerVault::Corporation
+      
       @corporation = Corporation.new
       @corporation.build_address
     end
 
     # GET /corporations/1/edit
     def edit
+      authorize! :update, @corporation
+      
       @corporation.build_address unless @corporation.address
     end
 
     # POST /corporations
     def create
+      authorize! :create, CustomerVault::Corporation
+      
       @corporation = Corporation.new(corporation_params)
 
       if @corporation.save
@@ -32,6 +39,8 @@ module CustomerVault
 
     # PATCH/PUT /corporations/1
     def update
+      authorize! :update, @corporation
+      
       if @corporation.update(corporation_params)
         redirect_to @corporation, notice: 'Corporation was successfully updated.'
       else
@@ -41,6 +50,8 @@ module CustomerVault
 
     # DELETE /corporations/1
     def destroy
+      authorize! :delete, @corporation
+      
       @corporation.destroy
       redirect_to people_url, notice: 'Corporation was successfully destroyed.'
     end

data/app/controllers/customer_vault/individuals_controller.rb

@@ -6,21 +6,28 @@ module CustomerVault
 
     # GET /individuals/1
     def show
+      authorize! :read, @individual
     end
 
     # GET /individuals/new
     def new
+      authorize! :create, CustomerVault::Individual
+      
       @individual = Individual.new
       @individual.build_address
     end
 
     # GET /individuals/1/edit
     def edit
+      authorize! :update, @individual
+      
       @individual.build_address unless @individual.address
     end
 
     # POST /individuals
     def create
+      authorize! :create, CustomerVault::Individual
+      
       @individual = Individual.new(individual_params)
 
       if @individual.save
@@ -32,6 +39,8 @@ module CustomerVault
 
     # PATCH/PUT /individuals/1
     def update
+      authorize! :update, @individual
+      
       if @individual.update(individual_params)
         redirect_to @individual, notice: 'Individual was successfully updated.'
       else
@@ -41,6 +50,8 @@ module CustomerVault
 
     # DELETE /individuals/1
     def destroy
+      authorize! :delete, @individual
+      
       @individual.destroy
       redirect_to people_url, notice: 'Individual was successfully destroyed.'
     end

data/app/controllers/customer_vault/links_controller.rb

@@ -5,14 +5,20 @@ module CustomerVault
     before_action :load_linkable, only: [:new, :edit, :create, :update, :destroy]
 
     def new
+      authorize! :update, @person
+      
       @link = Link.new
     end
 
     def edit
+      authorize! :update, @person
+      
       @link = Link.find(params[:id])
     end
 
     def create
+      authorize! :update, @person
+      
       params = link_params
       bob = params[:bob].split("-")
 
@@ -26,6 +32,8 @@ module CustomerVault
     end
 
     def update
+      authorize! :update, @person
+      
       @link = Link.find(params[:id])
       if @link.update(link_params)
         redirect_to @person, notice: 'Link was successfully updated.'
@@ -35,6 +43,8 @@ module CustomerVault
     end
 
     def destroy
+      authorize! :update, @person
+      
       Link.find(params[:id]).destroy
       redirect_to @person, notice: 'Individual was successfully destroyed.'
     end

data/app/controllers/customer_vault/people_controller.rb

@@ -7,6 +7,8 @@ module CustomerVault
     before_action :set_individual, only: [:show, :edit, :update, :destroy]
     
     def index
+      authorize! :list, Person
+      
       people = sortable_column_order do |column, direction|
         case column
         when 'name'

data/app/models/customer_vault/ability.rb

@@ -0,0 +1,11 @@
+module CustomerVault
+  class Ability
+    include CanCan::Ability
+
+    def initialize(user)
+      # Allow all by default
+      # Abilities are defined in host app
+      can :manage, :all
+    end
+  end
+end

data/app/views/customer_vault/corporations/_list_details.html.slim

@@ -1,6 +1,6 @@
 .row.corporation
 	.col-lg-1
-			=image_tag ('customer_vault/icons/group-48.png')
+			.corporation-icon = icon :users
 			=link_to 'Details', [customer_vault, c] , :class=>"btn btn-success btn-xs"
 	.col-lg-11
 		.row.top-buffer

data/app/views/customer_vault/individuals/_list_details.html.slim

@@ -1,6 +1,6 @@
 .row.individual
 	.col-lg-1
-			=image_tag ('customer_vault/icons/individual-48.png')
+			.individual-icon = icon :user
 			=link_to 'Details', [customer_vault, i] , :class=>"btn btn-success btn-xs"
 	.col-lg-11
 		.row.top-buffer

data/lib/customer_vault/version.rb

@@ -1,3 +1,3 @@
 module CustomerVault
-  VERSION = "1.1.0"
+  VERSION = "1.2.0"
 end