diff --git a/app/models/ability.rb b/app/models/ability.rb index b9c27b0ae..957864cab 100644 --- a/app/models/ability.rb +++ b/app/models/ability.rb @@ -35,6 +35,7 @@ def admin_permitions(user) else can :manage, ACTIONS, company_id: user.company_id can :read, Punch, company_id: user.company_id + can :manage, Punch, user_id: user.id can :create, ACTIONS end diff --git a/spec/models/ability_spec.rb b/spec/models/ability_spec.rb index c4054a665..8727bfa54 100644 --- a/spec/models/ability_spec.rb +++ b/spec/models/ability_spec.rb @@ -10,6 +10,10 @@ describe 'abilities admin' do let(:ability_admin) { Ability.new(admin_user) } + it "can manage it's own punches" do + expect(ability_admin).to be_able_to :manage, Punch.new(user: admin_user) + end + it "can't delete Company" do expect(ability_admin).to_not be_able_to :destroy, Company.new end