diff --git a/app/controllers/budgets/budgets_controller.rb b/app/controllers/budgets/budgets_controller.rb index c42bf999d..e673bf8ba 100644 --- a/app/controllers/budgets/budgets_controller.rb +++ b/app/controllers/budgets/budgets_controller.rb @@ -1,6 +1,6 @@ module Budgets class BudgetsController < ApplicationController - skip_authorization_check + load_and_authorize_resource def index end diff --git a/app/models/abilities/everyone.rb b/app/models/abilities/everyone.rb index 21e142c05..b2d60e97b 100644 --- a/app/models/abilities/everyone.rb +++ b/app/models/abilities/everyone.rb @@ -10,6 +10,7 @@ module Abilities can :read, Legislation can :read, User can [:search, :read], Annotation + can [:read], Budget end end end diff --git a/spec/models/abilities/everyone_spec.rb b/spec/models/abilities/everyone_spec.rb index 3f1e57278..d49c535d5 100644 --- a/spec/models/abilities/everyone_spec.rb +++ b/spec/models/abilities/everyone_spec.rb @@ -26,4 +26,6 @@ describe "Abilities::Everyone" do it { should be_able_to(:index, SpendingProposal) } it { should_not be_able_to(:create, SpendingProposal) } + + it { should be_able_to(:index, Budget) } end