Secure update and transfer

This commit is contained in:
Martin Lensment 2015-03-10 11:29:11 +02:00
parent 6352c23cf1
commit 8a8da67d38
2 changed files with 8 additions and 9 deletions

View file

@ -27,9 +27,11 @@ class Ability
can(:view_password, Epp::Contact) { |c| c.registrar_id == @user.registrar_id }
# Epp::Domain
can(:info, Epp::EppDomain) { |d, pw| d.registrar_id == @user.registrar_id || d.auth_info == pw }
can(:info, Epp::EppDomain) { |d, pw| d.registrar_id == @user.registrar_id || d.auth_info == pw }
can(:check, Epp::EppDomain)
can(:create, Epp::EppDomain)
can(:create, Epp::EppDomain)
can(:renew, Epp::EppDomain)
can(:update, Epp::EppDomain) { |d, pw| d.registrar_id == @user.registrar_id || d.auth_info == pw }
end
def user