diff --git a/app/controllers/admin/manager_invitations_controller.rb b/app/controllers/admin/manager_invitations_controller.rb index ed70322f34..b0da06b281 100644 --- a/app/controllers/admin/manager_invitations_controller.rb +++ b/app/controllers/admin/manager_invitations_controller.rb @@ -1,5 +1,7 @@ module Admin class ManagerInvitationsController < Spree::Admin::BaseController + authorize_resource class: false + def create @email = params[:email] @enterprise = Enterprise.find(params[:enterprise_id]) diff --git a/app/models/spree/ability_decorator.rb b/app/models/spree/ability_decorator.rb index dc00ec1871..0c9492b4cf 100644 --- a/app/models/spree/ability_decorator.rb +++ b/app/models/spree/ability_decorator.rb @@ -127,6 +127,8 @@ class AbilityDecorator can [:admin, :connect, :status, :destroy], StripeAccount do |stripe_account| user.enterprises.include? stripe_account.enterprise end + + can [:admin, :create], :manager_invitation end def add_product_management_abilities(user)