Files
nairobi/spec/models
Javi Martín d1d71f0044 Don't allow valuation if cannot edit dossier
We were adding the condition to show the form in the view. However, that
doesn't prevent users from sending a POST/PUT request to the controller
action.

We could add the condition to the controller as well, but since the
`valuate` permission is only used in one place, it's easier to restrict
that permission to valuators who can edit the dossier.
2019-11-05 23:15:16 +01:00
..
2019-10-30 02:26:42 +01:00
2019-10-30 18:48:55 +01:00
2019-05-31 18:22:59 +02:00
2019-03-27 15:22:14 +01:00