|
|
@@ -29,14 +29,13 @@ class Ability
|
|
|
# can :update, :all
|
|
|
else
|
|
|
user.permissions.each do |permission|
|
|
|
- if permission.model=="Order111"
|
|
|
+ if permission.model=="Order"
|
|
|
D_ENUM.clear
|
|
|
- departs = DepartRecord.find_by_sql("select id from depart_records ")
|
|
|
+ departs = AdminDepart.find_by_sql("select depart_id from depart_records where admin_user_id = #{user.id}")
|
|
|
departs.each do |dep|
|
|
|
D_ENUM.push(dep.id)
|
|
|
end
|
|
|
- can :update, Order, :depart => D_ENUM
|
|
|
- can :read, Order, :depart => D_ENUM
|
|
|
+ eval "can :#{permission.can}, #{permission.model},:depart => #{D_ENUM}"
|
|
|
else
|
|
|
eval "can :#{permission.can}, #{permission.model}"
|
|
|
end
|