5 commits

Author	SHA1	Message	Date
Andy Allan	2142ff02c2	Allow moderators to hide diary entries and comments	2019-05-15 13:40:15 +02:00
Andy Allan	7b057545c0	Disentangle the api abilities from the web abilities ... This will allow us to rename api actions without causing permissions headaches. The choice of abilities files is made by inheriting from either api_controller or application_controller. Also rename capabilities to api_capabilites, for consistency.	2019-03-27 18:07:29 +01:00
Andy Allan	a3a10237f7	Use CanCanCan for user_roles auth	2018-11-28 21:39:26 +01:00
Andy Allan	ea766ec57d	Use CanCanCan for notes authorization	2018-11-28 15:59:47 +01:00
Tom Hughes	8c269aba4e	Move abilities to a sepatarate top level directory	2018-11-03 12:56:50 +00:00

Renamed from test/models/abilities_test.rb (Browse further)