Return empty abilities if user is blocked

2013-08-27 12:41:49 +03:00 · 2013-08-27 12:41:49 +03:00 · 9fbbd6a68e
parent dd19ce9628
commit 9fbbd6a68e
1 changed files with 1 additions and 0 deletions
--- a/app/models/ability.rb
+++ b/app/models/ability.rb
@ -2,6 +2,7 @@ class Ability
  class << self
    def allowed(user, subject)
      return [] unless user.kind_of?(User)
+      return [] if user.blocked?

      case subject.class.name
      when "Project" then project_abilities(user, subject)