From 00fc5b77e57bffca22f5dca8ce3d7918f8a29e5f Mon Sep 17 00:00:00 2001
From: rgarcia <voodoorai2000@gmail.com>
Date: Thu, 9 Jun 2016 17:42:13 +0200
Subject: [PATCH] adds permissions in view for direct messages

---
 app/models/abilities/everyone.rb       | 1 +
 app/views/direct_messages/new.html.erb | 6 +++---
 2 files changed, 4 insertions(+), 3 deletions(-)

diff --git a/app/models/abilities/everyone.rb b/app/models/abilities/everyone.rb
index 21e142c05..39a7f69f5 100644
--- a/app/models/abilities/everyone.rb
+++ b/app/models/abilities/everyone.rb
@@ -10,6 +10,7 @@ module Abilities
       can :read, Legislation
       can :read, User
       can [:search, :read], Annotation
+      can :new, DirectMessage
     end
   end
 end
diff --git a/app/views/direct_messages/new.html.erb b/app/views/direct_messages/new.html.erb
index c26fdd94a..4c888ccd0 100644
--- a/app/views/direct_messages/new.html.erb
+++ b/app/views/direct_messages/new.html.erb
@@ -7,7 +7,7 @@
             receiver: @receiver.name) %>
     </h1>
 
-    <!-- if USER IS VERIFIED -->
+    <% if can? :create, @direct_message %>
       <%= form_for [@receiver, @direct_message] do |f| %>
         <%= render "shared/errors", resource: @direct_message %>
 
@@ -21,7 +21,7 @@
           <%= f.submit t("users.direct_messages.new.submit_button"), class: "button expanded" %>
         </div>
       <% end %>
-    <!-- else -->
+    <% else %>
       <div class="callout warning">
         <p>
           <%= t("users.direct_messages.new.verified_only",
@@ -29,6 +29,6 @@
                                     verification_path )).html_safe %>
         </p>
       </div>
-    <!-- end -->
+    <% end %>
   </div>
 </div>