Question

I am using “check authorization” in the application controller so every action will require a permission. I’m starting with giving me, the superadmin :=], permissions to manage all. I thought manage all would give me access to the whole app without naming a resource.

user model:

  def role?(role)
    roles.include? role.to_s
  end

application controller:

check_authorization

cancan’s ability model:

  def initialize(user)
    if user.role? :superadmin
      can :manage, :all
    end
  end

error message:

This action failed the check_authorization because it does not authorize_resource. Add skip_authorization_check to bypass this check.

Thank you.

Answer 1

As far as I am aware, you’re going to need to call authorize_resource in your controller as a before filter so that this works.