get contact info through domain transferred code

This commit is contained in:
olegphenomenon 2022-12-05 13:50:31 +02:00
parent 07bd3fba63
commit bc31a8231b
2 changed files with 9 additions and 1 deletions

View file

@ -54,7 +54,11 @@ class Ability
can(:delete, Epp::Domain) { |d, pw| d.registrar_id == @user.registrar_id || d.transfer_code == pw }
# Epp::Contact
can(:info, Epp::Contact) { |c, pw| c.registrar_id == @user.registrar_id || pw.blank? ? true : c.auth_info == pw }
can(:info, Epp::Contact) do |c, pw|
c.registrar_id == @user.registrar_id ||
pw.blank? ? true : c.auth_info == pw ||
c.transferred_passwords.include?(pw)
end
can(:view_full_info, Epp::Contact) { |c, pw| c.registrar_id == @user.registrar_id || c.auth_info == pw }
can(:check, Epp::Contact)
can(:create, Epp::Contact)