Ensure views only link to those actions allowed for current user

This commit is contained in:
Sebastian Serth
2018-11-30 13:29:04 +01:00
parent d3f67ab4c7
commit 2125fb1c1d
56 changed files with 128 additions and 264 deletions

View File

@@ -5,10 +5,11 @@ h1 = Intervention.model_name.human(count: 2)
thead
tr
th = t('activerecord.attributes.intervention.name')
th = t('shared.actions')
tbody
- @interventions.each do |intervention|
tr
td = intervention.name
td = link_to(t('shared.show'), intervention)
td = link_to_if policy(intervention).show?, intervention.name
td = link_to(t('shared.show'), intervention) if policy(intervention).show?
= render('shared/pagination', collection: @interventions)