cst1/openstreetmap-website
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Update capabilities check to actually reflect the existing logic

Browse source 
The OAuth capabilities are essentially user permissions that have been
granted to the app.  If the user authenticates through a non-oauth
method, they are assumed to have granted all capabilities to the app
This commit is contained in:
Chris Flipse 2018-06-10 13:06:10 -04:00
parent 2a44ff581f
commit 464c7f863e
2 changed files with 11 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

4
app/models/ability.rb
View file

@ -49,7 +49,9 @@ class Ability
# https://github.com/CanCanCommunity/cancancan/wiki/Defining-Abilities
end
# If a user provides no tokens, they've authenticated via a non-oauth method
# and permission to access to all capabilities is assumed.
def has_capability?(token, cap)
token && token.read_attribute(cap)
token.nil? || token.read_attribute(cap)
end
end