content_ability.rb

# Content Manager
#   – can access overview, reports, events, faq, snippets, and pages.
class ContentAbility
  include CanCan::Ability

  def initialize(user)
    if user.has_role?(:content)
      can :manage, :all
      cannot :manage, Product
      cannot :manage, Configuration
      cannot :manage, Order
      cannot :manage, Promotion

      cannot :manage, User      
      can :read, User do |resource|
        resource == user
      end

      can :update, User do |resource|
        resource == user
      end

    end
  end
end