From 0762c668551ccaf16ff5044eebf0e7b6c20a3e5e Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Javi=20Mart=C3=ADn?= Date: Wed, 6 Jan 2021 15:11:25 +0100 Subject: [PATCH] Don't skip authorization check managing cards I'm not sure why we were skipping this check. --- app/controllers/admin/site_customization/cards_controller.rb | 1 - 1 file changed, 1 deletion(-) diff --git a/app/controllers/admin/site_customization/cards_controller.rb b/app/controllers/admin/site_customization/cards_controller.rb index 9afbb409d..d00176d18 100644 --- a/app/controllers/admin/site_customization/cards_controller.rb +++ b/app/controllers/admin/site_customization/cards_controller.rb @@ -1,5 +1,4 @@ class Admin::SiteCustomization::CardsController < Admin::SiteCustomization::BaseController - skip_authorization_check load_and_authorize_resource :page, class: "::SiteCustomization::Page" load_and_authorize_resource :card, through: :page, class: "Widget::Card"