Implement Roles about action-center-platform HOT 4 OPEN

Roles goes hand in hand with authorization. I'm building a branch in which I propose using the gems cancancan and rolify to suffice our role authorization. The branch will include:

• Gem inclusions
• Definitions of roles in-code
• Specifications of roles onto users
• minor re-writes of existing authorization code

Here's an example of some existing authorization code:

(app/controllers/action_page_controller.rb)

#set_action_display_variables
.
.
.
# Redirect visitors to archived actions unless they have taken that action.
if @actionPage.archived? and @actionPage.archived_redirect_action_page_id and [email protected]?
  taken_action = false
  unless current_user.nil?
    taken_action = true if current_user.events.actions.where(action_page_id: @actionPage).first
  end
  return redirect_to(action_page_path(@actionPage.archived_redirect_action_page_id)) unless taken_action || current_user.try(:admin?)
end

Before I do roles, I'd like to write a cucumber test so it's easy to check off that my changes are valid non-breaking changes.

from action-center-platform.

Is the partner role site-wide, or specific to a campaign? If it's site-wide, I worry that there might be a privacy policy issue in giving them ability to download CSVs.

from action-center-platform.

@elliotharmon I assume this is referring to the existing concept of partners in the app: they can download CSVs for their organization.

from action-center-platform.

Thanks @mfb. I didn't realize that existed already. Ignore my comment.

from action-center-platform.