New authorization

This commit is contained in:
chris committed 2013-08-21 13:42:29 +08:00
1 parent d24bd176cc
commit c474fa063f
25 files changed
+440 -172

No files matched your search

+2 -2
View File
@@ -321,9 +321,9 @@ module OrbitBackendHelper
def is_authorized(object)
autorized = @module_app.authorizable_models.inject(false) do |autorized, klass|
if object.is_a?(klass.constantize)
autorized ||= object.cur_user_is_sub_manager_of("#{klass.underscore}_#{@module_app.key}")
autorized ||= object.user_can_sub_manage?(current_user)
else
autorized ||= object.category.cur_user_is_sub_manager_of("category_#{@module_app.key}")
autorized ||= object.category.user_can_sub_manage?(current_user)
end
autorized
end