tweak abilities. #432

datacite · Feb 27, 2020 · 6aa13d7 · 6aa13d7
1 parent 670b007
commit 6aa13d7
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/app/models/ability.rb b/app/models/ability.rb
@@ -20,10 +20,12 @@ def initialize(user)
     elsif user.role_id == "staff_user"
       can :read, :all
     elsif user.role_id == "consortium_admin" && user.provider_id.present?
-      can [:update, :read, :read_billing_information], Provider, symbol: user.provider_id.upcase
-      can [:manage], Provider do |provider|
+      can [:new, :create, :delete], Provider do |provider|
         user.provider_id.casecmp(provider.consortium_id)
       end
+      can [:update, :read, :read_billing_information], Provider do |provider|
+        user.provider_id.casecmp(provider.id) || user.provider_id.casecmp(provider.consortium_id)
+      end
       can [:read], Provider
       can [:manage], ProviderPrefix do |provider_prefix|
         provider_prefix.provider && user.provider_id.casecmp(provider_prefix.provider.consortium_id)