CanCanCan Authorization of activate and deactivate is broken

[orenyk]

The code authorize! :be, :admin used in ApplicationController#activate and #deactivate doesn't do anything as far as we can tell. This should be investigated and fixed.

[squidgetx]

I'm not sure what you mean by this. Deactivation/activation of equipment doesn't work (you get the standard CanCanCan redirect + error message) when viewing as a patron or checkout person (you can try this by entering the correct url ie /equipment_models/deactivate/11) and it does work when viewing as superuser or admin. The permissions are worded poorly, since the whole point of cancancan is to abstract away the roles system and instead use actively-worded permissions (I've added a commit to do that in a PR) but as far as I can tell the functionality is all there.