Add cancan authorization in all main urls

2015-08-10 14:59:42 +02:00
parent a9a4f4fb81
commit 30e738a2fe
4 changed files with 6 additions and 1 deletions
--- a/app/models/ability.rb
+++ b/app/models/ability.rb
@@ -7,7 +7,7 @@ class Ability

    if user # logged-in users
      can [:read, :create, :vote], Debate
-      can :edit, Debate do |debate|
+      can :update, Debate do |debate|
        debate.editable_by?(user)
      end