search

ryanb / cancan

Authorization Gem for Ruby on Rails.
MIT License
6.28k stars 785 forks source link

Mongoid Accessible By does not match Ability Precedence on Wiki #887

Open hannahhoward opened 11 years ago

hannahhoward commented 11 years ago

According to the docs on Ability Precedence, abilities defined later should take precendence over abilities defined earlier. However, the accessibly_by method, at least for Mongoid, does not behave this way. If a 'can' with no conditions is defined anywhere, no conditions are processed at all, even if they are below the can with no conditions. If a cannot with no conditions is defined, it has no effect on accessible_by, regardless of whether specific conditions are defined below or above the condition.

xhoy commented 10 years ago

Thanks for your submission! The ryanb/cancan repository has been inactive since Sep 06, 2013. Since only Ryan himself has commit permissions, the CanCan project is on a standstill.

CanCan has many open issues, including missing support for Rails 4. To keep CanCan alive, an active fork exists at cancancommunity/cancancan. The new gem is cancancan. More info is available at #994.

If your pull request or issue is still applicable, it would be really appreciated if you resubmit it to CanCanCan.

We hope to see you on the other side!