From 9fbbd6a68ec603de8fd32681d90f47aa98cbd289 Mon Sep 17 00:00:00 2001 From: Dmitriy Zaporozhets Date: Tue, 27 Aug 2013 12:41:49 +0300 Subject: [PATCH] Return empty abilities if user is blocked --- app/models/ability.rb | 1 + 1 file changed, 1 insertion(+) diff --git a/app/models/ability.rb b/app/models/ability.rb index 0b77564adc6..74f92fe7438 100644 --- a/app/models/ability.rb +++ b/app/models/ability.rb @@ -2,6 +2,7 @@ class Ability class << self def allowed(user, subject) return [] unless user.kind_of?(User) + return [] if user.blocked? case subject.class.name when "Project" then project_abilities(user, subject)