Refactor for authorization sanity

app/models/supplier.rb

@@ -42,6 +42,11 @@ class Supplier
   has_many :sections, dependent: :destroy
   has_and_belongs_to_many :employees, storing_keys: true
 
+  alias_method :non_enriced_employees, :employees
+  def employees
+    non_enriced_employees.tap { |es| es.each{ |e| e.enrich_with_settings(settings_for(e) ) }}
+  end
+
   after_create :add_section_on_create
 
   validates :name, presence: true
@@ -66,7 +71,11 @@ class Supplier
   end
 
   def employee_settings
-    SupplierEmployeesSettings.new(self)
+    @employee_settings ||= SupplierEmployeesSettings.new(self)
+  end
+
+  def settings_for(employee)
+    employee_settings.for_employee(employee)
   end
 
   def active_orders(options = {})