4 commits

Author	SHA1	Message	Date
Chris Flipse	5232914427	Implement the cancan filters for diary entries ... Access logic is not _entirely_ exported from the controller, unfortunately. For interface reasons, some actions which require admin have to be listed within the controller's deny_access method. This is required because, being a default-deny system, cancancan _cannot_ tell you the reason you were denied access; and so the "nice" feedback presenting next steps can't be gleaned from the exception	2018-06-17 13:57:06 -04:00
Chris Flipse	6da3ece683	use token in ability checks	2018-06-17 13:56:23 -04:00
Chris Flipse	b16aa11f65	fix tests for site controller	2018-06-17 13:56:23 -04:00
Andy Allan	ffa65d4d72	Add cancancan and the first ability definitions for site_controller	2018-06-17 13:56:23 -04:00