Unfloyded/Legamunt
0
0
Fork 0
Code Activity

Add finer permission requirements for managing webhooks (#25463)

Browse source
This commit is contained in:
Claire 2023-06-22 14:52:25 +02:00 • committed by GitHub
parent 63d15d5330
commit 602c458ab6
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
7 changed files with 52 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

4
app/policies/webhook_policy.rb
View file

@ -14,7 +14,7 @@ class WebhookPolicy < ApplicationPolicy
end
def update?
role.can?(:manage_webhooks)
role.can?(:manage_webhooks) && record.required_permissions.all? { |permission| role.can?(permission) }
end
def enable?
@ -30,6 +30,6 @@ class WebhookPolicy < ApplicationPolicy
end
def destroy?
role.can?(:manage_webhooks)
role.can?(:manage_webhooks) && record.required_permissions.all? { |permission| role.can?(permission) }
end
end