8 commits

Author	SHA1	Message	Date
Tom Hughes	09b6560e81	Merge remote-tracking branch 'upstream/pull/2106'	2019-01-09 17:16:01 +00:00
Andy Allan	1774109311	Use CanCanCan for changesets controller ... The expand_bbox method now needs require_write_api capability on tokens.	2019-01-09 12:41:33 +01:00
Andy Allan	414c4b2c36	Use CanCanCan for traces controller	2019-01-09 11:40:54 +01:00
Andy Allan	c7a7d29813	Require terms agreement for abilities and capabilities related to api write methods	2019-01-02 17:40:43 +01:00
Andy Allan	ca596106f5	Refactor users_controller to use CanCanCan for authorisation	2018-12-12 16:17:24 +01:00
Andy Allan	ea766ec57d	Use CanCanCan for notes authorization	2018-11-28 15:59:47 +01:00
Andy Allan	8f70fb2114	Use CanCanCan for changeset comments ... This introduces different deny_access handlers for web and api requests, since we want to avoid sending redirects as API responses. See #2064 for discussion.	2018-11-28 12:35:45 +01:00
Tom Hughes	8c269aba4e	Move abilities to a sepatarate top level directory	2018-11-03 12:56:50 +00:00

Renamed from app/models/capability.rb (Browse further)