feature: add account set-password ability

addons/api/addon/abilities/account.js

@@ -0,0 +1,15 @@
+import ModelAbility from './model';
+
+/**
+ * Provides abilities for accounts.
+ */
+export default class AccountAbility extends ModelAbility {
+  // =permissions
+
+  /**
+   * @type {boolean}
+   */
+  get canSetPassword() {
+    return this.hasAuthorizedAction('set-password');
+  }
+}

addons/api/addon/abilities/target.js

@@ -1,7 +1,7 @@
 import ModelAbility from './model';
 
 /**
- * Provides a `connect` ability for targets.
+ * Provides abilities for targets.
  */
 export default class TargetAbility extends ModelAbility {
   // =permissions

addons/api/app/abilities/account.js

@@ -0,0 +1 @@
+export { default } from 'api/abilities/account';

addons/api/mirage/factories/account.js

@@ -9,6 +9,7 @@ export default factory.extend({
       'read',
       'update',
       'delete',
+      'set-password',
     ],
   attributes() {
     switch (this.type) {

addons/api/tests/unit/abilities/account-test-.js

@@ -0,0 +1,17 @@
+import { module, test } from 'qunit';
+import { setupTest } from 'ember-qunit';
+
+module('Unit | Abilities | Account', function (hooks) {
+  setupTest(hooks);
+
+  test('it reflects when a given account may set password based on authorized_actions', function (assert) {
+    assert.expect(2);
+    const service = this.owner.lookup('service:can');
+    const model = {
+      authorized_actions: ['set-password'],
+    };
+    assert.ok(service.can('setPassword target', model));
+    model.authorized_actions = [];
+    assert.notOk(service.can('setPassword target', model));
+  });
+});