Ensure views only link to those actions allowed for current user

2018-11-30 13:29:04 +01:00
parent d3f67ab4c7
commit 2125fb1c1d
56 changed files with 128 additions and 264 deletions
--- a/app/mailers/user_mailer.rb
+++ b/app/mailers/user_mailer.rb
@ -39,6 +39,7 @@ class UserMailer < ActionMailer::Base
  end
  
  def exercise_anomaly_detected(exercise_collection, anomalies)
+    @user = exercise_collection.user
    @receiver_displayname = exercise_collection.user.displayname
    @collection = exercise_collection
    @anomalies = anomalies