From 0e8bdfcb5698ebef3dbc4b54733441a83c81d9e2 Mon Sep 17 00:00:00 2001 From: Stella Rouzi Date: Sat, 28 Mar 2015 13:24:21 +0200 Subject: [PATCH] no authorization for Conference, as it's being authorized with read action which includes index and show actions, however action show is authorized only for Conference with public splashpage --- app/controllers/subscriptions_controller.rb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/app/controllers/subscriptions_controller.rb b/app/controllers/subscriptions_controller.rb index 61b35ae3..6d5b7cdf 100644 --- a/app/controllers/subscriptions_controller.rb +++ b/app/controllers/subscriptions_controller.rb @@ -1,6 +1,6 @@ class SubscriptionsController < ApplicationController before_filter :authenticate_user! - load_and_authorize_resource :conference, find_by: :short_title + load_resource :conference, find_by: :short_title load_and_authorize_resource only: [:create, :destroy], through: :conference def create