jesse/thirteen-tien-len
1
0
Fork 0
Code Issues 5 Pull Requests Projects Releases Wiki Activity

Pundit authorization sitewide

Browse Source
This commit is contained in:
TheNeedful-DO 2023-12-05 05:27:51 +00:00
parent 5930a20efc
commit dcbeb8a72c
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
app/controllers/application_controller.rb
View File

@ -1,4 +1,5 @@
class ApplicationController < ActionController::Base
include Pundit::Authorization
# Prevent CSRF attacks by raising an exception.
# For APIs, you may want to use :null_session instead.
# protect_from_forgery with: :exception
@ -9,7 +10,6 @@ class ApplicationController < ActionController::Base
before_action :get_global_doodads
if (Rails.env.development? || Rails.env.test?)
include Pundit::Authorization
after_action :verify_authorized, unless: -> { devise_controller? }
# after_action :verify_policy_scoped, only: :index
rescue_from Pundit::NotAuthorizedError, with: :user_not_authorized