Fixes #18554 - skip collection_cache_lookup on authorized_for

app/helpers/application_helper.rb

@@ -97,7 +97,7 @@ def authorized_for(options)
       user.allowed_to?({ :controller => controller_name, :action => action, :id => id }) rescue false
     else
       authorizer = options.delete(:authorizer) || Authorizer.new(user)
-      authorizer.can?(permission, object) rescue false
+      authorizer.can?(permission, object, false) rescue false
     end
   end
 

test/helpers/application_helper_test.rb

@@ -87,4 +87,18 @@ def test_generate_link_for
       end
     end
   end
+  describe 'authorized_for' do
+    setup do
+      @permission = Permission.find_by_name('view_domains')
+      @user = FactoryGirl.create(:user)
+      @domain1 = FactoryGirl.create(:domain, :name => 'fake-domain.arpa')
+    end
+
+    test "disable cache when calling can?" do
+      as_user @user do
+        Authorizer.any_instance.expects(:can?).with(@permission, @domain1, false)
+        authorized_for({:permission => @permission, :auth_object => @domain1})
+      end
+    end
+  end
 end