updated authorization for all controllers
-changed from passing through records as feature not supported
-changed 403 error to better reflect what's happening
-added scope to many of the indexes
-added organisation-scope to requests from old org-admin roles
-renamed guidance_groups_policy to guidance_group_policy.rb
dev
1 parent ec3cac3 commit 2cad4e73c2ef6f2f65bb562a7d588f6c32fa2b11
@xsrust xsrust authored on 17 Aug 2016
Showing 13 changed files
View
app/controllers/dmptemplates_controller.rb
View
app/controllers/guidance_groups_controller.rb
View
app/controllers/guidances_controller.rb
View
app/controllers/token_permission_types_controller.rb
View
app/policies/application_policy.rb 0 → 100644
View
app/policies/dmptemplate_policy.rb
View
app/policies/guidance_group_policy.rb 0 → 100644
View
app/policies/guidance_groups_policy.rb 100644 → 0
View
app/policies/guidance_policy.rb
View
app/policies/organisation_policy.rb
View
app/policies/token_permission_type_policy.rb
View
app/policies/user_policy.rb
View
public/403.html