Fixing user-emailing abilities
This commit is contained in:
@@ -16,6 +16,8 @@ class Ability
|
||||
can :read, Payment, :user_id => user.id
|
||||
can [:read,:new_member_report], User, :id => user.id #TODO: why can users update themselves? Maybe because Devise doesn't check users/edit?
|
||||
can :read, UserCertification, :user_id => user.id
|
||||
can :compose_email, User
|
||||
can :send_email, User
|
||||
|
||||
if user.card_access_enabled
|
||||
can :access_doors_remotely, :door_access
|
||||
|
||||
Reference in New Issue
Block a user