Limit token launch policy

2023-12-14 18:28:40 +00:00 · 2023-12-14 18:28:40 +00:00 · 94deb14d7e
commit 94deb14d7e
parent ddf50b8266
1 changed files with 1 additions and 1 deletions
--- a/app/policies/token_policy.rb
+++ b/app/policies/token_policy.rb
@ -62,6 +62,6 @@ class TokenPolicy
  end

  def launch?
-    @user.admin? || true
+    @user.admin? || @token.ownable_id == @user.soft_token
  end
 end