cst1/openstreetmap-website
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Refactor users_controller to use CanCanCan for authorisation

Browse source
This commit is contained in:
Andy Allan 2018-12-12 16:01:54 +01:00
parent 981e4a34b5
commit ca596106f5
5 changed files with 21 additions and 35 deletions
Download patch file Download diff file Expand all files Collapse all files

2
app/abilities/capability.rb
View file

@ -6,6 +6,8 @@ class Capability
def initialize(token)
can :create, ChangesetComment if capability?(token, :allow_write_api)
can [:create, :comment, :close, :reopen], Note if capability?(token, :allow_write_notes)
can [:api_details], User if capability?(token, :allow_read_prefs)
can [:api_gpx_files], User if capability?(token, :allow_read_gpx)
can [:read, :read_one], UserPreference if capability?(token, :allow_read_prefs)
can [:update, :update_one, :delete_one], UserPreference if capability?(token, :allow_write_prefs)