diff --git a/app/policies/membership_app_policy.rb b/app/policies/membership_app_policy.rb index a3be3a1..120aeda 100644 --- a/app/policies/membership_app_policy.rb +++ b/app/policies/membership_app_policy.rb @@ -4,8 +4,7 @@ class MembershipAppPolicy < ApplicationPolicy def show? return false if context.guest_account.nil? - context.guest_account.is_superuser? || - record.account == context.guest_account + record.account == context.guest_account end def create? diff --git a/spec/requests/membership_apps/show_spec.rb b/spec/requests/membership_apps/show_spec.rb index 6cc5557..0205f87 100644 --- a/spec/requests/membership_apps/show_spec.rb +++ b/spec/requests/membership_apps/show_spec.rb @@ -50,7 +50,7 @@ RSpec.describe 'GET /membership_apps/:id' do let(:current_account) { create :superuser_account } specify do - expect(response).to have_http_status :ok + expect(response).to have_http_status :unauthorized end end end