cst1/openstreetmap-website
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Use CanCanCan for swf controller

Browse source
This commit is contained in:
Andy Allan 2019-01-09 10:32:57 +01:00
parent 18e418cc4c
commit 73201ca96b
2 changed files with 2 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

1
app/abilities/ability.rb
View file

@ -15,6 +15,7 @@ class Ability
can [:index, :create, :comment, :feed, :show, :search, :mine], Note can [:index, :create, :comment, :feed, :show, :search, :mine], Note
can [:index, :show], Redaction can [:index, :show], Redaction
can [:search_all, :search_nodes, :search_ways, :search_relations], :search can [:search_all, :search_nodes, :search_ways, :search_relations], :search
can [:trackpoints], :swf
can [:terms, :api_users, :login, :logout, :new, :create, :save, :confirm, :confirm_resend, :confirm_email, :lost_password, :reset_password, :show, :api_read, :auth_success, :auth_failure], User can [:terms, :api_users, :login, :logout, :new, :create, :save, :confirm, :confirm_resend, :confirm_email, :lost_password, :reset_password, :show, :api_read, :auth_success, :auth_failure], User
can [:index, :show, :blocks_on, :blocks_by], UserBlock can [:index, :show, :blocks_on, :blocks_by], UserBlock

1
app/controllers/swf_controller.rb
View file

@ -1,6 +1,7 @@
class SwfController < ApplicationController class SwfController < ApplicationController
skip_before_action :verify_authenticity_token skip_before_action :verify_authenticity_token
before_action :check_api_readable before_action :check_api_readable
authorize_resource :class => false
# to log: # to log:
# RAILS_DEFAULT_LOGGER.error("Args: #{args[0]}, #{args[1]}, #{args[2]}, #{args[3]}") # RAILS_DEFAULT_LOGGER.error("Args: #{args[0]}, #{args[1]}, #{args[2]}, #{args[3]}")