Limit token launch policy

2023-12-14 18:28:40 +00:00 · 2023-12-14 18:28:40 +00:00 · aa4cc4d150
commit aa4cc4d150
parent ce269f056f
1 changed files with 1 additions and 1 deletions
--- a/app/policies/token_policy.rb
+++ b/app/policies/token_policy.rb
@ -62,6 +62,6 @@ class TokenPolicy
  end
  def launch?
-    @user.admin? || true
+    @user.admin? || @token.ownable_id == @user.soft_token
  end
 end