Restrict ability to create authentications.

This commit is contained in:
Miles Gould
2013-04-09 17:19:38 +01:00
parent 89d8390a6f
commit 0697d5a5ea

View File

@@ -43,6 +43,11 @@ class Ability
can :manage, ScientificName
end
# can create/update/destroy their own authentications against other sites.
can :create, Authentication
can :update, Authentication, :member_id => member.id
can :destroy, Authentication, :member_id => member.id
# anyone can create a post, or comment on a post,
# but only the author can edit/destroy it.
can :create, Post