Update permission checking

This commit is contained in:
2024-11-10 17:34:02 +01:00
parent 537cd18336
commit 817b1a4376
3 changed files with 29 additions and 7 deletions

View File

@@ -1,11 +1,30 @@
class Default::UnitsController < ApplicationController
navigation_tab :units
before_action :find_unit, only: [:import, :export, :destroy]
before_action except: :index do
raise AccessForbidden unless current_user.at_least(:admin)
case action_name.to_sym
when :import, :import_all
raise AccessForbidden unless current_user.at_least(:active)
else
raise AccessForbidden unless current_user.at_least(:admin)
end
end
def index
@units = current_user.units.defaults_diff
end
def import
end
def import_all
end
def export
end
def destroy
end
end