authorize_resource with multiple classes(Models) ? about cancancan HOT 1 CLOSED

Hello @rajesh2210

Your line in ability is fine, you can specify an ability on multiple models.

I don't believe you can authorize multiple models in a single authorize_resource call.

Essentially you are saying that the user has to be have ability on all 4 objects to authorize the controller action. This indicates to me that there is actually a logical parent object (that may not exist) that is composed of the 4 models above, maybe something like MdmAddress. What you probably want to do is authorize on MdmAddress and then conditionally allow the user to manage parts of the Address using can? :read, MdmState in the view or strong_parameters permit array.

We are currently enhancing can? to allow you to check multiple models in #3

from cancancan.