gunghogeoduck/osem-fcy
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Merge pull request #886 from sonalkr132/auth-registration

Browse source 
Fix authorization of new and create in ConferenceRegistrationsController
This commit is contained in:
Henne Vogelsang 2016-03-30 17:29:10 +02:00
commit 1979c0d9c1
4 changed files with 27 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

11
app/models/ability.rb
View file

@ -46,9 +46,14 @@ class Ability
can :show, Commercial, commercialable_type: 'Event', commercialable_id: Event.where(state: 'confirmed').pluck(:id)
can :show, User
unless CONFIG['authentication']['ichain']['enabled']
can [:show, :create], Registration do |registration|
can :show, Registration do |registration|
registration.new_record?
end
can [:new, :create], Registration do |registration|
registration.conference.registration_open? && registration.new_record?
end
can :show, Event do |event|
event.new_record?
end
@ -68,6 +73,10 @@ class Ability
can :manage, Registration, user_id: user.id
can [:new, :create], Registration do |registration|
registration.conference.registration_open?
end
can :index, Ticket
can :manage, TicketPurchase, user_id: user.id