let managers see reports but only admins can update it

gems-uff · Oct 1, 2024 · dc6a45c · dc6a45c
1 parent a29845b
commit dc6a45c
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/app/models/ability.rb b/app/models/ability.rb
@@ -40,6 +40,7 @@ class Ability
   ]
 
   DOCUMENT_MODELS = [
+    Report
   ]
 
   PLACE_MODELS = [
@@ -223,8 +224,9 @@ def initialize_education(user, roles)
   end
 
   def initialize_documents(user, roles)
-    if roles[Role::ROLE_SECRETARIA]
+    if roles[:manager]
       can :manage, Ability::DOCUMENT_MODELS
+      cannot :update, Report unless roles[Role::ROLE_ADMINISTRADOR]
     end
   end