New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix authorize #3099

Merged

raycarrick-ed merged 1 commit into master from plan_policy_fix

Jan 28, 2022

Contributor

raycarrick-ed commented Jan 28, 2022

Fixes security issue with plan policy.

Changes proposed in this PR:

authorize on index method in contributors controller had no effect in essence allowing anyone access to any plan. See ticket above for an example. This change requires the :show? policy to be satisfied.


fix authorize

957879c

raycarrick-ed merged commit 0a32936 into master

raycarrick-ed deleted the plan_policy_fix branch

January 28, 2022 12:57

briri mentioned this pull request

Merge Development for v3.0.5 #3108

Merged

laurastandaert mentioned this pull request

Evaluate 3.0.5 and 3.0.6 DMPbelgium/roadmap#37

Closed

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment