no authorization for Conference, as it's being authorized with read action which includes index and show actions, however action show is authorized only for Conference with public splashpage

This commit is contained in:
Stella Rouzi 2015-03-28 13:24:21 +02:00
parent defef46ae8
commit 0e8bdfcb56

View file

@ -1,6 +1,6 @@
class SubscriptionsController < ApplicationController class SubscriptionsController < ApplicationController
before_filter :authenticate_user! before_filter :authenticate_user!
load_and_authorize_resource :conference, find_by: :short_title load_resource :conference, find_by: :short_title
load_and_authorize_resource only: [:create, :destroy], through: :conference load_and_authorize_resource only: [:create, :destroy], through: :conference
def create def create