#initializers/authorization.rb<\/span><\/div>class<\/span> AR<\/span>::<\/span>Base<\/span><\/div> def<\/span> editable_by<\/span>(<\/span>user<\/span>)<\/span><\/div> user<\/span>.<\/span>owns?<\/span>(<\/span>self<\/span>)<\/span> ||<\/span> user<\/span>.<\/span>is_admin?<\/span><\/div> end<\/span><\/div> <\/div>
def<\/span> destroyable_by<\/span>(<\/span>user<\/span>)<\/span><\/div> editable_by<\/span>(<\/span>user<\/span>)<\/span><\/div> end<\/span><\/div> <\/div>
#etc...<\/span><\/div>end<\/span><\/div> <\/div>
class<\/span> Note<\/span> <<\/span> AR<\/span>::<\/span>Base<\/span><\/div> #def editable_by(user);end<\/span><\/div> <\/div>
def<\/span> destroyable_by<\/span>(<\/span>user<\/span>)<\/span><\/div> super<\/span>(<\/span>user<\/span>)<\/span> &&<\/span> comments<\/span>.<\/span>empty?<\/span><\/div> end<\/span><\/div> <\/div>
#etc...<\/span><\/div>end<\/span><\/div><\/pre><\/div>\n \n <\/div>\n\n