104 commits

Author	SHA1	Message	Date
Andy Allan	8f70fb2114	Use CanCanCan for changeset comments ... This introduces different deny_access handlers for web and api requests, since we want to avoid sending redirects as API responses. See #2064 for discussion.	2018-11-28 12:35:45 +01:00
Andy Allan	79207ee594	Use CanCanCan for redaction authorizations	2018-11-07 13:28:58 +01:00
Andy Allan	368ce0000d	Migrate UserBlocksController to use CanCanCan	2018-11-07 13:07:08 +01:00
Tom Hughes	8c269aba4e	Move abilities to a sepatarate top level directory	2018-11-03 12:56:50 +00:00