From: Benjamin Reynolds <breyno127@gmail.com>
Date: Sun, 10 Jun 2018 16:09:32 +0000 (-0400)
Subject: Authorize actions on GeocoderController with CanCanCan Ability
X-Git-Tag: live~2788^2~15^2~2
X-Git-Url: https://git.openstreetmap.org/rails.git/commitdiff_plain/4d20a2c96a3ff722071e7b1093d260b1236b2eeb?ds=sidebyside

Authorize actions on GeocoderController with CanCanCan Ability
---

diff --git a/app/models/ability.rb b/app/models/ability.rb
index 8fc15ded5..d33430fb4 100644
--- a/app/models/ability.rb
+++ b/app/models/ability.rb
@@ -9,6 +9,9 @@ class Ability
 
     can [:list, :rss, :view, :comments], DiaryEntry
 
+    can [:search, :search_latlon, :search_ca_postcode, :search_osm_nominatim,
+         :search_geonames, :search_osm_nominatim_reverse, :search_geonames_reverse], :geocoder
+
     if user
       can :weclome, :site
 
diff --git a/test/models/abilities_test.rb b/test/models/abilities_test.rb
index de9f9ba9b..298e8299b 100644
--- a/test/models/abilities_test.rb
+++ b/test/models/abilities_test.rb
@@ -16,6 +16,15 @@ end
 
 class GuestAbilityTest < AbilityTest
 
+  test "geocoder permission for a guest" do
+    ability = Ability.new nil, tokens
+
+    [:search, :search_latlon, :search_ca_postcode, :search_osm_nominatim,
+     :search_geonames, :search_osm_nominatim_reverse, :search_geonames_reverse].each do |action|
+      assert ability.can?(action, :geocoder), "should be able to #{action} geocoder"
+    end
+  end
+
   test "diary permissions for a guest" do
     ability = Ability.new nil, tokens
     [:list, :rss, :view, :comments].each do |action|