|
updated authorization for all controllers
-changed from passing through records as feature not supported -changed 403 error to better reflect what's happening -added scope to many of the indexes -added organisation-scope to requests from old org-admin roles -renamed guidance_groups_policy to guidance_group_policy.rb |
|---|
|
|
| app/controllers/dmptemplates_controller.rb |
|---|
| app/controllers/guidance_groups_controller.rb |
|---|
| app/controllers/guidances_controller.rb |
|---|
| app/controllers/token_permission_types_controller.rb |
|---|
| app/policies/application_policy.rb 0 → 100644 |
|---|
| app/policies/dmptemplate_policy.rb |
|---|
| app/policies/guidance_group_policy.rb 0 → 100644 |
|---|
| app/policies/guidance_groups_policy.rb 100644 → 0 |
|---|
| app/policies/guidance_policy.rb |
|---|
| app/policies/organisation_policy.rb |
|---|
| app/policies/token_permission_type_policy.rb |
|---|
| app/policies/user_policy.rb |
|---|
| public/403.html |
|---|