Fix authorization check in domain blocks controller

meemudotorg · Jul 5, 2022 · 7527937 · 7527937
1 parent 30e7836
commit 7527937
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/app/controllers/admin/domain_blocks_controller.rb b/app/controllers/admin/domain_blocks_controller.rb
@@ -5,6 +5,7 @@ class DomainBlocksController < BaseController
     before_action :set_domain_block, only: [:show, :destroy, :edit, :update]
 
     def batch
+      authorize :domain_block, :create?
       @form = Form::DomainBlockBatch.new(form_domain_block_batch_params.merge(current_account: current_account, action: action_from_button))
       @form.save
     rescue ActionController::ParameterMissing