project-memberships-permissions

Then permissions -- only the project owner (and admins) can manipulate these project memberships:
Hobo · Aug 12, 2013 · 73ec433 · 73ec433
1 parent 0d3b8ff
commit 73ec433
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/app/models/project_membership.rb b/app/models/project_membership.rb
@@ -13,15 +13,15 @@ class ProjectMembership < ActiveRecord::Base
   # --- Permissions --- #
 
   def create_permitted?
-    acting_user.administrator?
+    acting_user.administrator? || project.owner_is?(acting_user)
   end
 
   def update_permitted?
-    acting_user.administrator?
+    acting_user.administrator? || project.owner_is?(acting_user)
   end
 
   def destroy_permitted?
-    acting_user.administrator?
+    acting_user.administrator? || project.owner_is?(acting_user)
   end
 
   def view_permitted?(field)