mark index action as fully authorized when fetching records through accessible_by

2011-03-25 16:34:13 -07:00
parent 5d68caefd0
commit 27eba72e4b
2 changed files with 5 additions and 2 deletions
@@ -28,6 +28,7 @@ module CanCan
        self.resource_instance ||= load_resource_instance
      elsif load_collection?
        self.collection_instance ||= load_collection
+        current_ability.fully_authorized! @params[:action], @params[:controller]
      end
    end