[#325] fix forbidden for simple user

2013-11-20 17:33:48 +06:00 · 2013-11-20 17:33:48 +06:00 · 69cefd8764
parent ccdf15bcad
commit 69cefd8764
2 changed files with 2 additions and 1 deletions
--- a/app/controllers/projects/projects_controller.rb
+++ b/app/controllers/projects/projects_controller.rb
@ -2,7 +2,7 @@
 class Projects::ProjectsController < Projects::BaseController
  include ProjectsHelper
  before_filter :authenticate_user!
-  load_and_authorize_resource :id_param => :project_name, :collection => :possible_forks # to force member actions load
+  load_and_authorize_resource :id_param => :project_name # to force member actions load
  before_filter :who_owns, :only => [:new, :create, :mass_import, :run_mass_import]

  def index
--- a/app/models/ability.rb
+++ b/app/models/ability.rb
@ -31,6 +31,7 @@ class Ability

    can :show, Group
    can :show, User
+    can :possible_forks, Project

    if user.guest? # Guest rights
      # can [:new, :create], RegisterRequest