Files
nairobi/app/controllers/admin/site_customization/cards_controller.rb
Javi Martín 0762c66855 Don't skip authorization check managing cards
I'm not sure why we were skipping this check.
2021-01-12 14:50:36 +01:00

8 lines
261 B
Ruby

class Admin::SiteCustomization::CardsController < Admin::SiteCustomization::BaseController
load_and_authorize_resource :page, class: "::SiteCustomization::Page"
load_and_authorize_resource :card, through: :page, class: "Widget::Card"
def index
end
end