3 Commits

Author	SHA1	Message	Date
evazion	d8b51e3f02	users: don't allow gifting upgrades to demote privileged users. ... Don't allow gifting Gold or Platinum upgrades to users above Platinum level. Fixes an exploit where you could demote Builders and above by gifting them an upgrade.	2020-12-13 21:21:08 -06:00
evazion	2144f45fa4	users: add account upgrade integration tests. ... * Test that the user upgrade process integrates with Stripe correctly. * Replace a deprecated `card` param with `source` in `Stripe::Charge.create`. * Rescue Stripe::StripeError instead of Stripe::CardError so that we handle failures outside of card failures, such as network errors.	2020-12-13 21:21:08 -06:00
evazion	5c6d26ea24	pundit: convert users to pundit.	2020-03-20 18:03:00 -05:00