Fix comment policy

This commit is contained in:
Maximilian Grundke
2016-04-26 17:42:53 +02:00
parent 4b5cd5a22a
commit 57b773698b
3 changed files with 9 additions and 3 deletions

View File

@ -112,13 +112,13 @@ class CommentsController < ApplicationController
def destroy
@comments = Comment.where(file_id: params[:file_id], row: params[:row])
authorize!
@comments.delete_all
respond_to do |format|
#format.html { redirect_to comments_url, notice: 'Comments were successfully destroyed.' }
format.html { head :no_content, notice: 'Comments were successfully destroyed.' }
format.json { head :no_content }
end
authorize!
end
private

View File

@ -1,6 +1,12 @@
class CommentPolicy < ApplicationPolicy
def author?
@user == @record.author
if @record.is_a?(ActiveRecord::Relation)
flag = true
@record.all {|item| flag = (flag and item.author == @user)}
flag
else
@user == @record.author
end
end
private :author?

View File

@ -143,7 +143,7 @@ do not put a carriage return in the line below. it will be present in the presen
commentModal.find('#removeAllButton').on('click', function(e){
var file_id = $(editor.container).data('file-id');
deleteComment(file_id,row, editor);
deleteComment(file_id, row, editor);
commentModal.modal('hide');
});