Limit token launch policy

2023-12-14 18:28:40 +00:00 · 2023-12-14 18:28:40 +00:00 · 940813a482
commit 940813a482
parent a5a5b29d07
1 changed files with 1 additions and 1 deletions
--- a/app/policies/token_policy.rb
+++ b/app/policies/token_policy.rb
@ -62,6 +62,6 @@ class TokenPolicy
  end

  def launch?
-    @user.admin? || true
+    @user.admin? || @token.ownable_id == @user.soft_token
  end
 end