Updating payment and front page status alerts to work properly

2013-10-10 20:58:19 -07:00
parent 008ceaed9e
commit 0d1894d6e8
3 changed files with 5 additions and 2 deletions
--- a/app/models/ability.rb
+++ b/app/models/ability.rb
@@ -13,6 +13,7 @@ class Ability
      can :read_details, Mac
      can [:update], Mac, :user_id => nil
      can [:create,:update], Mac, :user_id => user.id
+      can :read, Payment, :user_id => user.id
      can [:read,:new_member_report], User, :id => user.id #TODO: why can users update themselves? Maybe because Devise doesn't check users/edit?
      can :read, UserCertification, :user_id => user.id