From ddfdd494f01571604201b9da911d7c169376e77f Mon Sep 17 00:00:00 2001 From: Vladimir Shushlin Date: Mon, 25 Feb 2019 11:43:19 +0000 Subject: Allow maintainers to remove pages Move remove_pages permission to maintainer Fix before_action in pages controller to check `remove_pages` permission Add specs --- app/controllers/projects/pages_controller.rb | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) (limited to 'app/controllers/projects/pages_controller.rb') diff --git a/app/controllers/projects/pages_controller.rb b/app/controllers/projects/pages_controller.rb index d0e35bee986..73e629ab7c3 100644 --- a/app/controllers/projects/pages_controller.rb +++ b/app/controllers/projects/pages_controller.rb @@ -5,7 +5,8 @@ class Projects::PagesController < Projects::ApplicationController before_action :require_pages_enabled! before_action :authorize_read_pages!, only: [:show] - before_action :authorize_update_pages!, except: [:show] + before_action :authorize_update_pages!, except: [:show, :destroy] + before_action :authorize_remove_pages!, only: [:destroy] # rubocop: disable CodeReuse/ActiveRecord def show -- cgit v1.2.3