issues
search
THP-2-0
/
THP2_back
24
stars
6
forks
source link
Add policies
#29
Open
zaratan
opened
6 years ago
zaratan
commented
6 years ago
Why ?
Because everyone isn't authorized to do everything.
Must have
[ ] Proper policies in place
[ ] The API must nicely answer with
401
when unauthorized
Todo
[ ] Add
pundit
gem
[ ] Write a policy so that only its creator can modify or delete a lesson
[ ] Test it :D
Why ?
Because everyone isn't authorized to do everything.
Must have
401
when unauthorizedTodo