Commit Graph

3 Commits

Author SHA1 Message Date
Skud
a3b7822268 Review and cleanup of JSON API
Removed JSON from classes that shouldn't have it.
(PT: https://www.pivotaltracker.com/story/show/54570954)

Also found a couple of controllers with broken authorization (i.e. not
checking CanCan). Incidentally, this also fixes the comment form bug at
https://www.pivotaltracker.com/story/show/54328716.
2013-08-05 13:29:07 +10:00
Skud
26d16b9d86 only admins can mess with products/orders for now 2013-05-07 21:24:26 +10:00
Skud
af38f8574e rails g scaffold Product... 2013-05-07 21:13:23 +10:00