gistfile1.txt

module Spree
  module Api
    class Ability
      def initialize(user, tokens={})
      if tokens[:order]
        can :read, Spree::Order do |order|
          order.token == tokens[:order]
        end
      end

      if tokens[:base] # TODO: better name
        can :read, Spree::Everything
      end
    end
  end
end