add comments and points

app/abilities/page.js

@@ -0,0 +1,10 @@
+import { inject as service } from '@ember/service';
+import { Ability } from 'ember-can';
+
+export default class pageAbility extends Ability {
+  @service session;
+
+  get canVisit() {
+    return Boolean(this.session.currentUser);
+  }
+}

app/abilities/user.js

@@ -0,0 +1,12 @@
+import { inject as service } from '@ember/service';
+import { Ability } from 'ember-can';
+
+export default class pageAbility extends Ability {
+  @service session;
+
+  get canSeeSecrets() {
+    const { id, isAdmin } = this.session.currentUser;
+    const userID = this.model;
+    return Boolean(id === userID || isAdmin);
+  }
+}

app/components/game-carousel/template.hbs

@@ -61,9 +61,9 @@
       <span class='visually-hidden'>Next</span>
     </button>
   </div>
-  <LinkTo @route='home.games'>
+  <LinkTo @route='home.games' class={{if (cannot 'press button') 'pe-none'}}>
     <Shared::Button
-      class='btn-primary'
+      class={{if (can 'press button') 'btn-primary' 'btn-danger'}}
       @label='Check the games'
       disabled={{cannot 'press button'}}
     />

app/components/user/details/template.hbs

@@ -25,7 +25,9 @@
       {{@user.id}}</li>
     <li data-test-user-email class='list-group-item'>Email:
       {{@user.email}}</li>
-    <li data-test-user-password class='list-group-item'>Password:
-      {{@user.password}}</li>
+    {{#if (can 'see secrets in user' @user.id)}}
+      <li data-test-user-password class='list-group-item'>Password:
+        {{@user.password}}</li>
+    {{/if}}
   </ul>
 </div>

app/home/route.js

@@ -4,14 +4,18 @@ import { inject as service } from '@ember/service';
 export default class HomeRoute extends Route {
   @service router;
   @service session;
+  @service abilities;
 
   async beforeModel() {
     const { isLoggedIn } = this.session;
     if (!isLoggedIn) {
       this.router.transitionTo('/login');
       return;
     }
-
+    if (this.abilities.cannot('visit page')) {
+      this.router.transitionTo('/login');
+      return;
+    }
     await this.session.setCurrentUser();
   }
 }