search

jferreira / rails_DRONE

0 stars 0 forks source link

As a system admin i want only authrised users to be able to add and delate packages and bookings #82

Open jferreira opened 5 years ago

jferreira commented 5 years ago

Authentication & Devise is in (Authorization & Pundit)

jferreira commented 5 years ago

@rodger think this also was about the authorisation gem bit, so no hack deleting. As in use pundit. Should we use pundit? MIght be good to learn

rogermutt commented 5 years ago

@jferreira It's a good point. I need to re-read the Pundit stuff. My PR is divided between edit and destroy so we can choose NOT to use one of the two.

I suggest: We leave current implementation (providing testing works) and if time this arvo I can move it to Pundit. Let me know what you think.