Add policies - Githubissues

THP-2-0 / THP2_back

24 stars 6 forks source link

Add policies #29

Open zaratan opened 6 years ago

zaratan commented 6 years ago

Why ?

Because everyone isn't authorized to do everything.

Must have

[ ] Proper policies in place
[ ] The API must nicely answer with 401 when unauthorized

Todo

[ ] Add pundit gem
[ ] Write a policy so that only its creator can modify or delete a lesson
[ ] Test it :D