specifies permission the right way
This commit is contained in:
@@ -4,7 +4,7 @@
|
||||
<td>
|
||||
<%= link_to spending_proposal.title, spending_proposal %>
|
||||
|
||||
<% if current_user && current_user.id == spending_proposal.author_id %>
|
||||
<% if can?(:destroy, spending_proposal) %>
|
||||
<%= link_to t("users.show.delete_spending_proposal"),
|
||||
spending_proposal,
|
||||
method: :delete,
|
||||
|
||||
@@ -202,7 +202,7 @@ feature 'Users' do
|
||||
feature 'Spending proposals' do
|
||||
|
||||
background do
|
||||
@author = create(:user)
|
||||
@author = create(:user, :level_two)
|
||||
@spending_proposal = create(:spending_proposal, author: @author, title: 'Build a school')
|
||||
end
|
||||
|
||||
|
||||
Reference in New Issue
Block a user