consul/nairobi
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
Files
d1d71f0044c4842e04f7d3eca409611d5092a00b
nairobi/app/views
History
Javi Martín d1d71f0044 Don't allow valuation if cannot edit dossier 
We were adding the condition to show the form in the view. However, that
doesn't prevent users from sending a POST/PUT request to the controller
action.

We could add the condition to the controller as well, but since the
`valuate` permission is only used in one place, it's easier to restrict
that permission to valuators who can edit the dossier.
2019-11-05 23:15:16 +01:00
..
account
Use active record translations for labels
2019-10-07 01:56:23 +02:00
admin
Simplify tests for audits
2019-11-05 14:17:04 +01:00
budgets
Remove CKEditor divs
2019-10-25 17:00:18 +02:00
comments
Use raw instead of html_safe
2019-10-08 19:10:13 +02:00
communities
Add rubocop spacing rules
2019-09-10 21:04:56 +02:00
custom
…
dashboard
Remove CKEditor divs
2019-10-25 17:00:18 +02:00
debates
Remove CKEditor divs
2019-10-25 17:00:18 +02:00
devise
Sanitize translations instead of using _html
2019-10-09 19:46:47 +02:00
direct_messages
Use sanitize in translations with links
2019-10-08 18:46:21 +02:00
direct_uploads
Extract ajax upload and destroy_upload actions from images and documents controllers and place them at new controllers to manage direct uploads
2017-09-26 13:55:28 +02:00
documents
Sanitize translations instead of using _html
2019-10-09 19:46:47 +02:00
follows
Use double quotes inside ERB
2019-03-25 14:58:54 +01:00
images
Apply rule to end files with a newline character
2019-09-10 20:02:15 +02:00
kaminari
Remove kaminari_path
2019-10-20 17:26:14 +02:00
layouts
Set current locale as HTML language in all layouts
2019-10-25 15:34:40 +02:00
legislation
Apply Style/HashSyntax rubocop rule
2019-10-26 13:03:49 +02:00
links
Replace single quotes with double quotes
2019-09-10 19:21:03 +02:00
mailer
Extract method to use WYSIWYGSanitizer in views
2019-10-21 21:32:02 +02:00
management
Use relative URLs where possible
2019-10-20 17:26:14 +02:00
map_locations
Simplify generating checkboxes in forms
2019-10-06 19:32:04 +02:00
milestones
Rename methods to add auto links to HTML
2019-10-08 18:46:20 +02:00
moderation
Sanitize descriptions in the views
2019-10-21 21:32:02 +02:00
notifications
Apply rule to end files with a newline character
2019-09-10 20:02:15 +02:00
officing
Remove useless label false parameter in select_tag
2019-10-06 19:32:04 +02:00
organizations/registrations
Sanitize translations instead of using _html
2019-10-09 19:46:47 +02:00
pages
Remove _html suffix from already sanitized texts
2019-10-09 19:46:47 +02:00
polls
Remove poll votation types
2019-10-30 18:48:55 +01:00
proposal_notifications
Remove _html suffix from already sanitized texts
2019-10-09 19:46:47 +02:00
proposals
Remove CKEditor divs
2019-10-25 17:00:18 +02:00
relationable
Add rubocop spacing rules
2019-09-10 21:04:56 +02:00
shared
Remove tracker role
2019-11-01 20:08:46 +01:00
stats
Remove consecutive blank lines
2019-09-10 20:02:15 +02:00
topics
Use sanitize in translations with links
2019-10-08 18:46:21 +02:00
users
Edit Budget Investment only in accepting phase (#3716)
2019-10-18 13:59:14 +02:00
valuation
Don't allow valuation if cannot edit dossier
2019-11-05 23:15:16 +01:00
verification
Sanitize translations instead of using _html
2019-10-09 19:46:47 +02:00
welcome
Sanitize descriptions in the views
2019-10-21 21:32:02 +02:00