CanCan授权发布

class Ability
  include CanCan::Ability

  def initialize(user)
    user ||= User.new # guest user

    if user.role? :admin
      can :manage, :all
    elsif user.role? :operations
      can :manage, :all
    elsif user.role? :customer_support
      can :read, :all
    else
      user.role? :marketing
    can :read, :all
    end
 end
end

def role?(role)
    self.roles.include? role.to_s
  end

<% if can? :create, Product %>
              <td class=\"action\"><%= link_to \'Show\', product %></td>
              <td class=\"action\"><%= link_to \'Edit\', edit_product_path( product) %></td>
              <td class=\"action\"><%= link_to \'Destroy\', product, :confirm => \'Are you sure?\', :method => :delete %></td>
          <% end %>