diff --git a/app/controllers/admin/spending_proposals_controller.rb b/app/controllers/admin/spending_proposals_controller.rb index 631ea341f..03fffeca7 100644 --- a/app/controllers/admin/spending_proposals_controller.rb +++ b/app/controllers/admin/spending_proposals_controller.rb @@ -1,7 +1,7 @@ class Admin::SpendingProposalsController < Admin::BaseController has_filters %w{unresolved accepted rejected}, only: :index - before_action :load_spending_proposal, except: [:index, :show] + load_and_authorize_resource except: [:index, :show] def index @spending_proposals = SpendingProposal.includes([:geozone]).send(@current_filter).order(created_at: :desc).page(params[:page]) @@ -21,10 +21,4 @@ class Admin::SpendingProposalsController < Admin::BaseController redirect_to request.query_parameters.merge(action: :index) end - private - - def load_spending_proposal - @spending_proposal = SpendingProposal.find(params[:id]) - end - end \ No newline at end of file diff --git a/app/models/abilities/administrator.rb b/app/models/abilities/administrator.rb index 4af32a75c..6ba99e4fa 100644 --- a/app/models/abilities/administrator.rb +++ b/app/models/abilities/administrator.rb @@ -34,6 +34,8 @@ module Abilities can [:search, :create, :index, :destroy], ::Moderator can :manage, Annotation + + can :manage, SpendingProposal end end end