Allow :create Entry only for publishers on accounts, not on entries

codevise · Aug 13, 2017 · 0c7019b · 0c7019b
1 parent 3d34806
commit 0c7019b
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/app/policies/pageflow/entry_policy.rb b/app/policies/pageflow/entry_policy.rb
@@ -87,7 +87,8 @@ def publish?
     end
 
     def create?
-      publish? && AccountPolicy::Scope.new(user, Account).entry_creatable.any?
+      query.has_at_least_account_role?(:publisher) &&
+        AccountPolicy::Scope.new(user, Account).entry_creatable.any?
     end
 
     def duplicate?