Enforce file creation allowance via Pundit policy

2020-12-03 17:05:21 +01:00
parent bd8741f3dd
commit 5eaa508b74
1 changed files with 3 additions and 1 deletions
--- a/app/policies/code_ocean/file_policy.rb
+++ b/app/policies/code_ocean/file_policy.rb
@ -15,8 +15,10 @@ module CodeOcean
    def create?
      if @record.context.is_a?(Exercise)
        admin? || author?
-      else
+      elsif @record.context.is_a?(Submission) and @record.context.exercise.allow_file_creation
        author?
+      else
+        no_one
      end
    end