Use cancancan to load pages and cards

Like we do in most places in the application.
2021-01-06 15:08:02 +01:00
parent c1c84507b8
commit ded5a8d468
3 changed files with 5 additions and 2 deletions
--- a/app/controllers/admin/site_customization/cards_controller.rb
+++ b/app/controllers/admin/site_customization/cards_controller.rb
@@ -1,8 +1,8 @@
 class Admin::SiteCustomization::CardsController < Admin::SiteCustomization::BaseController
  skip_authorization_check
+  load_and_authorize_resource :page, class: "::SiteCustomization::Page"
+  load_and_authorize_resource :card, through: :page, class: "Widget::Card"

  def index
-    @page = ::SiteCustomization::Page.find(params[:page_id])
-    @cards = @page.cards
  end
 end