pundit: add missing authorize calls.
This commit is contained in:
@@ -1,4 +1,8 @@
|
||||
class ForumPostPolicy < ApplicationPolicy
|
||||
def index?
|
||||
true
|
||||
end
|
||||
|
||||
def show?
|
||||
user.level >= record.topic.min_level
|
||||
end
|
||||
|
||||
@@ -1,4 +1,8 @@
|
||||
class ForumTopicPolicy < ApplicationPolicy
|
||||
def index?
|
||||
true
|
||||
end
|
||||
|
||||
def show?
|
||||
user.level >= record.min_level
|
||||
end
|
||||
|
||||
Reference in New Issue
Block a user