Files
grecia/app/controllers
Bertocq 76e05d58b1 Return 404 status for non-published Budget access
Why:

Non-admin users shouldn't be able to access, or know of the existence
of a non-published Budget.

How:

Raising an ActionController::RoutingError (404 error) to simulate the
same behaviour as accesing a non-existing Budget.

We could have used CanCanCan abilities for this but then an user could
be aware of existing but not published Budgets by trying different urls
2018-01-08 22:59:20 +01:00
..
2017-12-14 21:13:46 +01:00
2017-12-19 20:32:55 +01:00
2017-09-28 13:36:20 +02:00
2017-10-23 21:40:04 +02:00
2017-12-19 20:32:55 +01:00
2017-07-25 13:01:03 +02:00