Merge pull request #621 from differentreality/subscription_authorization

no authorization for Conference in subscriptions controller
This commit is contained in:
Stella Rouzi 2015-04-01 11:49:40 +03:00
commit 3bd82039ad

View file

@ -1,6 +1,6 @@
class SubscriptionsController < ApplicationController
before_filter :authenticate_user!
load_and_authorize_resource :conference, find_by: :short_title
load_resource :conference, find_by: :short_title
load_and_authorize_resource only: [:create, :destroy], through: :conference
def create