Merge pull request #35 from RileyManda/food-component-authorization

Food component authorization

app/controllers/food_controller.rb

@@ -1,4 +1,5 @@
 class FoodController < ApplicationController
+  load_and_authorize_resource
   def new
     @food = Food.new
   end
@@ -27,7 +28,7 @@ def destroy
     @food = Food.find(params[:id])
     @food.destroy
 
-    redirect_to food_path, notice: 'Food successfully deleted.'
+    redirect_to food_index_path, notice: 'Food successfully deleted.'
   end
 
   private

app/models/ability.rb

@@ -3,6 +3,7 @@ class Ability
 
   def initialize(user)
     user ||= User.new
+    can :manage, Food, user_id: user.id
     can :manage, Recipe, user_id: user.id
     # Define abilities for the user here. For example:
     #

app/views/food/index.html.erb

@@ -25,8 +25,10 @@
       <tr>
         <td><%= food.name %></td>
         <td><%= food.measurement_unit %></td>
-        <td><%= food.price %></td>
-        <td><%= food.quantity %></td>
+        <td>&#x20A6; <%= food.price %></td>
+        <% if can? :manage, food %>
+         <td> <%= button_to "Delete", food_path(food), method: :delete, data: { turbo_method: :delete, confirm: "Are you sure?", turbo_confirm: "Are you sure?" }, class: 'btn btn-link' %><td>
+        <% end %>
       </tr>
     <% end %>
   </tbody>

config/routes.rb

@@ -2,7 +2,7 @@
   root 'food#index'
   devise_for :users
 
-  resources :food, only: [:index, :new, :create] do
+  resources :food, only: [:index, :show, :new, :create, :destroy] do
     resources :recipe, controller: 'recipe' do
       post 'add_ingredient_to_recipe', on: :member
     end