Use author_in_programming_group? policy for files & RfCs

* Allow all members of a programming group to list and solve RfCs
* Also adjust policy specs to respect programming groups
This commit is contained in:
kiragrammel
2023-08-22 09:23:20 +02:00
committed by Sebastian Serth
parent 9d1be1eeff
commit 01accdae58
7 changed files with 101 additions and 19 deletions

View File

@ -44,7 +44,11 @@ class RequestForCommentsController < ApplicationController
# GET /my_request_for_comments
def my_comment_requests
@search = policy_scope(RequestForComment)
.joins(:submission)
.where(user: current_user)
.or(policy_scope(RequestForComment)
.joins(:submission)
.where(submission: {contributor: current_user.programming_groups}))
.order(created_at: :desc) # Order for the LIMIT part of the query
.ransack(params[:q])