3 commits

Author	SHA1	Message	Date
Andy Allan	ea766ec57d	Use CanCanCan for notes authorization	2018-11-28 15:59:47 +01:00
Andy Allan	8f70fb2114	Use CanCanCan for changeset comments ... This introduces different deny_access handlers for web and api requests, since we want to avoid sending redirects as API responses. See #2064 for discussion.	2018-11-28 12:35:45 +01:00
Tom Hughes	8c269aba4e	Move abilities to a sepatarate top level directory	2018-11-03 12:56:50 +00:00

Renamed from test/models/capability_test.rb (Browse further)