authorization with cancancan

app/models/ability.rb

@@ -2,16 +2,27 @@ class Ability
   include CanCan::Ability
 
   def initialize(user)
-    # guest user (not logged in)
-    user ||= User.new
-    if user.admin? || user.organizer?
-      # An admin can manage everything
-      can :manage, :all
-    else
-      can [:update, :destroy], Event do |event|
-        event.users.include?(user)
-      end
-      can [:create, :read], Event
-    end
+    # Define abilities for the passed in user here. For example:
+    #
+    user ||= User.new # guest user (not logged in)
+    #   if user.admin?
+    #     can :manage, :all
+    #   else
+    #     can :read, :all
+    #   end
+    #
+    # The first argument to `can` is the action you are giving the user permission to do.
+    # If you pass :manage it will apply to every action. Other common actions here are
+    # :read, :create, :update and :destroy.
+    #
+    # The second argument is the resource the user can perform the action on. If you pass
+    # :all it will apply to every resource. Otherwise pass a Ruby class of the resource.
+    #
+    # The third argument is an optional hash of conditions to further filter the objects.
+    # For example, here the user can only update published articles.
+    #
+    #   can :update, Article, :published => true
+    #
+    # See the wiki for details: https://github.com/ryanb/cancan/wiki/Defining-Abilities
   end
 end

app/models/admin_ability.rb

@@ -0,0 +1,11 @@
+class AdminAbility
+  include CanCan::Ability
+
+  def initialize(user)
+    user ||= User.new # for guest
+    if user.role?('Conference Admin')
+      can :manage, :all
+    end
+
+  end
+end