diff --git a/app/models/spree/ability_decorator.rb b/app/models/spree/ability_decorator.rb index bef96e961f..d9013dd0a1 100644 --- a/app/models/spree/ability_decorator.rb +++ b/app/models/spree/ability_decorator.rb @@ -23,7 +23,7 @@ class AbilityDecorator # Enterprise User can only access orders that they are a distributor for can [:index, :create], Spree::Order - can [:admin, :index, :read, :create, :update, :fire, :resend], Spree::Order do |order| + can [:admin, :read, :update, :fire, :resend], Spree::Order do |order| # We allow editing orders with a nil distributor as this state occurs # during the order creation process from the admin backend order.distributor.nil? || user.enterprises.include?(order.distributor)