Don't skip authorization check managing cards
I'm not sure why we were skipping this check.
This commit is contained in:
@@ -1,5 +1,4 @@
|
||||
class Admin::SiteCustomization::CardsController < Admin::SiteCustomization::BaseController
|
||||
skip_authorization_check
|
||||
load_and_authorize_resource :page, class: "::SiteCustomization::Page"
|
||||
load_and_authorize_resource :card, through: :page, class: "Widget::Card"
|
||||
|
||||
|
||||
Reference in New Issue
Block a user