Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix valuation permissions for finished budgets #3817

Merged
merged 5 commits into from
Nov 5, 2019
Merged

Fix valuation permissions for finished budgets #3817

merged 5 commits into from
Nov 5, 2019

Conversation

javierm
Copy link
Member

@javierm javierm commented Nov 5, 2019

References

Objectives

  • Fix valuation permissions for finished budgets
  • Simplify permissions for valuators

@javierm javierm added the Bug label Nov 5, 2019
@javierm javierm self-assigned this Nov 5, 2019
@javierm javierm added this to Reviewing in Roadmap via automation Nov 5, 2019
@javierm javierm force-pushed the valuators branch 2 times, most recently from 4176a0f to 508580f Compare November 5, 2019 18:51
Using `select` is easier to follow than adding `nil` to an array and
then using `compact`.
@javierm javierm force-pushed the valuators branch 2 times, most recently from 57febc5 to 5279628 Compare November 5, 2019 22:07
We were adding the condition to show the form in the view. However, that
doesn't prevent users from sending a POST/PUT request to the controller
action.

We could add the condition to the controller as well, but since the
`valuate` permission is only used in one place, it's easier to restrict
that permission to valuators who can edit the dossier.
@javierm javierm merged commit 4406966 into master Nov 5, 2019
Roadmap automation moved this from Reviewing to Release 1.1.0 Nov 5, 2019
@javierm javierm deleted the valuators branch November 5, 2019 23:03
smarques pushed a commit to venetochevogliamo/consul that referenced this pull request Apr 29, 2020
Fix valuation permissions for finished budgets
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
No open projects
Roadmap
  
Release 1.1.0
Development

Successfully merging this pull request may close these issues.

None yet

1 participant