sferik/rails_admin — Issue #998: CanCan - Relations
Author: alansikora
Created: 2012-02-22 13:48:17+00:00
State: open

Hello,

another CanCan limitation.

For example, I have an User model, and an UserImage model. With "accepts_nested_attributes_for", I can have one nested on the other one.

But if I allow a role to manage the User model, it will be able to change/create an UserImage as well on the nested form, even if I set "cannot :manage, UserImage", for example.

Is this right?