kotovalexarian-likes-gitlab
/
gitlab-org--gitlab-foss
1
0
Fork 0
Code Releases Activity

take the dive - only use abilities from Policies

This commit is contained in:
http://jneen.net/ 2016-08-18 10:39:49 -07:00
parent 5b7edc74b6
commit 06ba2602c5
1 changed files with 1 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
app/models/ability.rb
View File

@ -61,14 +61,7 @@ class Ability
private
def uncached_allowed(user, subject)
policy_class = BasePolicy.class_for(subject) rescue nil
return policy_class.abilities(user, subject) if policy_class
return anonymous_abilities(subject) if user.nil?
return [] unless user.is_a?(User)
return [] if user.blocked?
abilities_by_subject_class(user: user, subject: subject)
BasePolicy.class_for(subject).abilities(user, subject)
end
def abilities_by_subject_class(user:, subject:)