diff --git a/app/models/ability.rb b/app/models/ability.rb index 7ebfffc8b..74906c72d 100644 --- a/app/models/ability.rb +++ b/app/models/ability.rb @@ -59,7 +59,9 @@ class Ability pw.blank? ? true : c.auth_info == pw || c.transferred_passwords.include?(pw) end - can(:view_full_info, Epp::Contact) { |c, pw| c.registrar_id == @user.registrar_id || c.auth_info == pw } + can(:view_full_info, Epp::Contact) do |c, pw| + c.registrar_id == @user.registrar_id || c.auth_info == pw || c.transferred_passwords.include?(pw) + end can(:check, Epp::Contact) can(:create, Epp::Contact) can(:update, Epp::Contact) { |c, pw| c.registrar_id == @user.registrar_id || c.auth_info == pw }