This repository has been archived by the owner on Sep 20, 2019. It is now read-only.

Non Admin users should not be able to edit documents #342

Closed

deekoder opened this issue Mar 31, 2017 · 0 comments

Assignees

Labels

community fixed priority: high

Contributor

deekoder commented Mar 31, 2017

Apart from disabling routes, authentication and authorization checks must be in place. Add checks in permission.rb on user model.

deekoder self-assigned this

deekoder added priority: high community fixed labels

deekoder closed this as completed

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.