Only show menu entries if user authorized to access

config/initializers/avo.rb

@@ -155,50 +155,50 @@ Avo.configure do |config|
     end
 
     section "Samples" do
-      resource :samples
+      resource :samples, visible: -> { authorize current_user, Sample, "index?", raise_exception: false }
     end
 
     section "Petrography" do
-      resource :archaeometry_analysis
+      resource :archaeometry_analysis, visible: -> { authorize current_user, ArchaeometryAnalysis, "index?", raise_exception: false }
     end
 
     section "Location Data" do # apprentice (no-delete)
-      resource :gazetteers
-      resource :phases
-      resource :types
+      resource :gazetteers, visible: -> { authorize current_user, Gazetteer, "index?", raise_exception: false }
+      resource :phases, visible: -> { authorize current_user, Phase, "index?", raise_exception: false }
+      resource :types, visible: -> { authorize current_user, Type, "index?", raise_exception: false }
     end
 
     section "Object Data" do # apprentice (no-delete)
-      resource :analysis_methods
-      resource :forms
-      resource :fragmentations
-      resource :fabric_codes
-      resource :literature
-      resource :vessel_form_types
-      resource :wares
+      resource :analysis_methods, visible: -> { authorize current_user, AnalysisMethod, "index?", raise_exception: false }
+      resource :forms, visible: -> { authorize current_user, Form, "index?", raise_exception: false }
+      resource :fragmentations, visible: -> { authorize current_user, Fragmentation, "index?", raise_exception: false }
+      resource :fabric_codes, visible: -> { authorize current_user, FabricCode, "index?", raise_exception: false }
+      resource :literature, visible: -> { authorize current_user, Literature, "index?", raise_exception: false }
+      resource :vessel_form_types, visible: -> { authorize current_user, VesselFormType, "index?", raise_exception: false }
+      resource :wares, visible: -> { authorize current_user, Ware, "index?", raise_exception: false }
     end
 
     # TODO: in a later step: all should get no-delete, no-edit
     section "Fabric Description" do # apprentice (no-delete)
-      resource :colours
-      resource :frequencies
-      resource :hardnesses
-      resource :sortings
-      resource :sphericities
-      resource :surfaces
-      resource :texts
-      resource :textures
-      resource :voids_forms
+      resource :colours, visible: -> { authorize current_user, Colour, "index?", raise_exception: false }
+      resource :frequencies, visible: -> { authorize current_user, Frequency, "index?", raise_exception: false }
+      resource :hardnesses, visible: -> { authorize current_user, Hardness, "index?", raise_exception: false }
+      resource :sortings, visible: -> { authorize current_user, Sorting, "index?", raise_exception: false }
+      resource :sphericities, visible: -> { authorize current_user, Sphericity, "index?", raise_exception: false }
+      resource :surfaces, visible: -> { authorize current_user, Surface, "index?", raise_exception: false }
+      resource :texts, visible: -> { authorize current_user, Text, "index?", raise_exception: false }
+      resource :textures, visible: -> { authorize current_user, Texture, "index?", raise_exception: false }
+      resource :voids_forms, visible: -> { authorize current_user, VoidsForm, "index?", raise_exception: false }
     end
 
     section "Image Data" do # apprentice (no-delete)
-      resource :image_colors
-      resource :image_sizes
+      resource :image_colors, visible: -> { authorize current_user, ImageColor, "index?", raise_exception: false }
+      resource :image_sizes, visible: -> { authorize current_user, ImageSize, "index?", raise_exception: false }
     end
 
     section "Actors" do # apprentice (no-delete)
-      resource :actor_types
-      resource :actors
+      resource :actor_types, visible: -> { authorize current_user, ActorType, "index?", raise_exception: false }
+      resource :actors, visible: -> { authorize current_user, Actor, "index?", raise_exception: false }
     end
 
     # resource :sample_status # TODO: will be removed