renamed dmptemplates to templates

updated policies

updated token_permission_types controller and policy file

began updating roles

re-wrote data access for guidance_groups controller

updated prefetching for guidances index

made changes to allow guidance to display

updated organisations to orgs, and associated views/controller

updated user policy for organisation->org renaming

renamed comments to notes

updated some of the answers structure, commented for future updates

removed option_warnings table and unused code surrounding the structure

fixed bug where selecting guidance was impropperly filtering

Added tooltip for 'published' checkbox on guidance page. Added confirmation alert when clicking delete on guidance and guidance groups. Removed invalid policy check for organisation id match when creating new guidance

fixed organisation policy file to use user.organisation instead or user.organisation_id and fixed typos

fixed issue where orgs cannot customise other org's(funders) templates. logic for this auth limiting dosent make me happy as it potentially allows organisations to submit edited json via post and change the other organisations existing sections, even if that option is not available through the ui

added authorization to settings/plans and settings/projects

added auth and removed json from project_groups controller. additionally added constraint to projects and plans controllers that all actions must be authenticated through pundit

removed unused json responses and added auth to plans controller

removed json and added authorization to projects controller

moved authorization logic from comments controller to policy file. Additionally removed unused crud methods

moved logic for authorization out of answers controller into the policy

removed authorization from home-controller as some users will not be logged in when request fielded

forced auth on organisations_controller. TODO: re-check parent, children, and templates after AJAX removed

added auth to home controller

forced all actions to be authenticated through pundit

added ability to grant permissions to other users

bugfixes to auth

finished implimenting new authorization scheme in dmptemplates

updated authorization for all controllers ...

-changed from passing through records as feature not supported
-changed 403 error to better reflect what's happening
-added scope to many of the indexes
-added organisation-scope to requests from old org-admin roles
-renamed guidance_groups_policy to guidance_group_policy.rb