Story#105842700 - Set security

app/controllers/registrant/contacts_controller.rb

@@ -1,8 +1,18 @@
 class Registrant::ContactsController < RegistrantController
 
   def show
-    @contact = Contact.find(params[:id])
+    @contact = contacts.find(params[:id])
     authorize! :read, @contact
-    @contact.valid?
+  end
+
+  def contacts
+    ident_cc, ident = @current_user.registrant_ident.to_s.split '-'
+    begin
+      BusinessRegistryCache.fetch_by_ident_and_cc(ident, ident_cc).associated_contacts
+    rescue Soap::Arireg::NotAvailableError => error
+      flash[:notice] = I18n.t(error.json[:message])
+      Rails.logger.fatal("[EXCEPTION] #{error.to_s}")
+      Contact.none
+    end
   end
 end

app/controllers/registrant/domains_controller.rb

@@ -11,15 +11,12 @@ class Registrant::DomainsController < RegistrantController
   end
 
   def show
-    @domain = Domain.find(params[:id])
-    if !(domains.include?(@domain) || @domain.valid?)
-      redirect_to registrant_domains_path
-    end
+    @domain = domains.find(params[:id])
     authorize! :read, @domain
   end
 
   def set_domain
-    @domain = Domain.find(params[:id])
+    @domain = domains.find(params[:id])
   end
 
   def download_list