no authorization for Conference, as it's being authorized with read action which includes index and show actions, however action show is authorized only for Conference with public splashpage

This commit is contained in:
Stella Rouzi 2015-03-28 13:24:21 +02:00
parent defef46ae8
commit 0e8bdfcb56

View file

@ -1,6 +1,6 @@
class SubscriptionsController < ApplicationController
before_filter :authenticate_user!
load_and_authorize_resource :conference, find_by: :short_title
load_resource :conference, find_by: :short_title
load_and_authorize_resource only: [:create, :destroy], through: :conference
def create