From 73ec4338557163a2cba5f9ec573322c063b8b190 Mon Sep 17 00:00:00 2001 From: Bryan Larsen Date: Mon, 3 Jun 2013 16:38:27 +0200 Subject: [PATCH] project-memberships-permissions Then permissions -- only the project owner (and admins) can manipulate these project memberships: --- app/models/project_membership.rb | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/app/models/project_membership.rb b/app/models/project_membership.rb index 65f0b8b..143d1b7 100644 --- a/app/models/project_membership.rb +++ b/app/models/project_membership.rb @@ -13,15 +13,15 @@ class ProjectMembership < ActiveRecord::Base # --- Permissions --- # def create_permitted? - acting_user.administrator? + acting_user.administrator? || project.owner_is?(acting_user) end def update_permitted? - acting_user.administrator? + acting_user.administrator? || project.owner_is?(acting_user) end def destroy_permitted? - acting_user.administrator? + acting_user.administrator? || project.owner_is?(acting_user) end def view_permitted?(field)