Untitled

class Fluffy < ActiveRecord::Base
  include Joosy::Resource

  restrict do |user|
    if user.admin?
      can [ :view, :create, :update, :destroy ]
    else
      can :view
      cannot :view, [ :secure_key ]

      can :create, [ :username, :password ]
      can :update, [ :password ]

      can :update, :role => { :inclusion => %w{viewer poster} }
    end
  end

  validates :role, :inclusion => %w{viewer poster editor admin}
end