Use CanCanCan for nodes, ways, relations, old and api controllers

This commit is contained in:
Andy Allan 2019-01-09 18:28:27 +01:00
parent fbbabeff1e
commit e7f943c715
7 changed files with 45 additions and 5 deletions

View file

@ -6,9 +6,11 @@ class OldController < ApplicationController
skip_before_action :verify_authenticity_token
before_action :setup_user_auth, :only => [:history, :version]
before_action :api_deny_access_handler
before_action :authorize, :only => [:redact]
before_action :authorize_moderator, :only => [:redact]
before_action :require_allow_write_api, :only => [:redact]
authorize_resource
before_action :check_api_readable
before_action :check_api_writable, :only => [:redact]
around_action :api_call_handle_error, :api_call_timeout