BURs: don't allow edits to approved scripts

Also fix bad formatting for non-admins in BUR index
2022-06-01 14:07:30 +02:00
parent 1e78b97eb8
commit 5932d8d3a3
2 changed files with 4 additions and 4 deletions
--- a/app/policies/bulk_update_request_policy.rb
+++ b/app/policies/bulk_update_request_policy.rb
@@ -6,7 +6,7 @@ class BulkUpdateRequestPolicy < ApplicationPolicy
  end

  def update?
-    unbanned? && (user.is_admin? || record.user_id == user.id)
+    unbanned? && !record.is_approved? && (user.is_admin? || record.user_id == user.id)
  end

  def approve?