gunghogeoduck/osem-fcy
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

do not index users unless organizer or admin

Browse source
This commit is contained in:
Stella Rouzi 2014-12-11 13:15:37 +02:00
parent d41988c74f
commit d7873c9e6c
1 changed files with 1 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

1
app/models/ability.rb
View file

@ -134,6 +134,7 @@ class Ability
# can manage their own User # can manage their own User
can :manage, User, id: user.id can :manage, User, id: user.id
cannot :index, User
# can manage their own Event # can manage their own Event
can :manage, Event, id: user.events.pluck(:id) can :manage, Event, id: user.events.pluck(:id)