consul/grecia
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Added clarifying comments related to security

Browse Source
This commit is contained in:
Alberto Miedes Garcés
2016-10-01 08:50:16 +02:00
parent fab190b16c
commit fe2546dbbb
1 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
app/controllers/graphql_controller.rb
View File

@@ -1,4 +1,7 @@
class GraphqlController < ApplicationController class GraphqlController < ApplicationController
# (!!) Está autorizando todos los resources, no sólo Proposal ¿por qué?
# (!!) Nos da acceso a recursos a los que se supone que no tenemos acceso, cómo 'Geozones', ¿por qué?
authorize_resource :proposal authorize_resource :proposal
def query def query