Files
nairobi/app/models
Javi Martín d1d71f0044 Don't allow valuation if cannot edit dossier
We were adding the condition to show the form in the view. However, that
doesn't prevent users from sending a POST/PUT request to the controller
action.

We could add the condition to the controller as well, but since the
`valuate` permission is only used in one place, it's easier to restrict
that permission to valuators who can edit the dossier.
2019-11-05 23:15:16 +01:00
..
2019-10-30 02:26:42 +01:00
2019-10-31 13:48:42 +01:00
2015-07-15 13:32:13 +02:00
2019-11-01 20:08:46 +01:00
2019-11-01 20:08:46 +01:00
2019-10-30 02:26:42 +01:00
2019-03-27 15:22:14 +01:00
2019-10-23 14:39:31 +02:00
2019-03-14 17:25:43 +01:00
2019-04-29 13:08:43 -05:00
2019-10-30 02:26:42 +01:00
2019-02-05 17:41:00 +01:00
2019-10-25 19:29:12 +02:00
2017-12-15 19:21:02 +01:00