@tomhughes commented on this pull request.
> @@ -43,7 +43,7 @@ def initialize(user)
can :read, :dashboard
can [:read, :update], [:preferences, :profile]
can [:create, :subscribe, :unsubscribe], DiaryEntry
- can :update, DiaryEntry, :user => user
+ can [:update, :hide, :unhide], DiaryEntry, :user => user
No I think that's always applied, otherwise anybody would be able able to
update other people's diary entries at the moment?
--
Reply to this email directly or view it on GitHub:
https://github.com/openstreetmap/openstreetmap-website/pull/4540#discussion_r3494120389
You are receiving this because you are subscribed to this thread.
Message ID:
<openstreetmap/openstreetmap-website/pull/4540/review/[email protected]>_______________________________________________
rails-dev mailing list
[email protected]
https://lists.openstreetmap.org/listinfo/rails-dev
