spree/spree — pull request #3469 by jhawthorn (2013-08-01 00:06:11+00:00)
Title: cancan: Hide unauthorized links in admin

We have a store which will has a user class which can view, but not update orders and products in the admin. This worked fairly well due to judicious use of `authorize!` in controllers, but left dead links to the unauthorized pages.

This adds more `can?` tests in the admin to hide these links.