tsechingho · August 29, 2015 14:13 · Jan 12, 2015 · Jan 12, 2015 · Jan 12, 2015
diff --git a/application_controller.rb b/application_controller.rb
@@ -1,4 +1,4 @@
-# app/controllers/application_controller.rb
+# app/controllers/application_controller.rb or any controller
 class ApplicationController < ActionController::Base
   def current_ability
     @current_ability ||= Ability.ability_for current_customer

diff --git a/application_controller.rb b/application_controller.rb
@@ -0,0 +1,7 @@
+# app/controllers/application_controller.rb
+class ApplicationController < ActionController::Base
+  def current_ability
+    @current_ability ||= Ability.ability_for current_customer
+  end
+end
+
diff --git a/ability.rb b/ability.rb
@@ -0,0 +1,18 @@
+# app/models/ability.rb
+module Ability
+  class << self
+    def ability_for user, options = {}
+      abilities = AnonymousAbility.new
+
+      return abilities unless user
+
+      abilities.merge MemberAbility.new user, options
+
+      if user.has_role? 'administrator'
+        abilities.merge AdministratorAbility.new
+      end
+
+      abilities
+    end
+  end
+end
diff --git a/member_ability.rb b/member_ability.rb
@@ -0,0 +1,16 @@
+# app/abilities/member_ability.rb
+class MemberAbility
+  include CanCan::Ability
+
+  attr_accessor :current_user
+
+  def initialize current_user, options = {}
+    can :update, User do |user|
+      user.email == current_user.email
+    end
+
+    can :update, Profile do |profile|
+      profile.owners.include? current_user
+    end
+  end
+end