Allow registrar to see only its own invoices #2819

app/models/ability.rb

@@ -89,7 +89,7 @@ class Ability
   # Registrar/api_user dynamic role
   def billing
     can :view, :registrar_dashboard
-    can :manage, Invoice
+    can(:manage, Invoice) { |i| i.buyer_id == @user.registrar_id }
     can :manage, :deposit
     can :read, AccountActivity
   end

spec/epp/contact_spec.rb

@@ -522,7 +522,7 @@ describe 'EPP Contact', epp: true do
             authInfo: { pw: { value: 'newpassword' } }
           }
         })
-        puts Nokogiri xml
+
         response = epp_plain_request(xml, :xml)
         response[:results][0][:msg].should == 'Command completed successfully'
         response[:results][0][:result_code].should == '1000'