diff --git a/app/controllers/spree/admin/orders/customer_details_controller_decorator.rb b/app/controllers/spree/admin/orders/customer_details_controller_decorator.rb new file mode 100644 index 0000000000..fe98451154 --- /dev/null +++ b/app/controllers/spree/admin/orders/customer_details_controller_decorator.rb @@ -0,0 +1,8 @@ +Spree::Admin::Orders::CustomerDetailsController.class_eval do + #Override BaseController.authorize_admin to inherit CanCan permissions for the current order + def authorize_admin + load_order unless @order + authorize! :admin, @order + authorize! params[:action].to_sym, @order + end +end \ No newline at end of file