Foodsoft/foodsoft
1
1
Fork 0
Code Issues 36 Pull requests 5 Projects 1 Releases Wiki Activity

Add missing authorization for InvoicesController

Browse source
This commit is contained in:
Patrick Gansterer 2020-04-11 00:04:35 +02:00
parent 3b79c05ffe
commit a3946ed3d4
2 changed files with 16 additions and 10 deletions
Download patch file Download diff file Expand all files Collapse all files

1
app/controllers/finance/invoices_controller.rb
View file

@ -1,4 +1,5 @@
class Finance::InvoicesController < ApplicationController
before_action :authenticate_finance_or_invoices
before_action :find_invoice, only: [:show, :edit, :update, :destroy]
before_action :ensure_can_edit, only: [:edit, :update, :destroy]