allows not-logged-in users to read existing annotations

2015-12-16 16:26:59 +01:00
parent 9ebcebb2ab
commit fc8a1fc84b
1 changed files with 2 additions and 1 deletions
--- a/app/models/abilities/common.rb
+++ b/app/models/abilities/common.rb
@@ -40,7 +40,8 @@ module Abilities
        can :vote_featured, Proposal
      end

-      can :manage, Annotation
+      can :create, Annotation
+      can [:update, :delete], Annotation, user_id: user.id

    end
  end