Return empty abilities if user is blocked

Dmitriy Zaporozhets
1 parent dd19ce96
Showing 1 changed file with 1 additions and 0 deletions Show diff stats
app/models/ability.rb
@@ -2,6 +2,7 @@ class Ability
   class << self
     def allowed(user, subject)
       return [] unless user.kind_of?(User)
+      return [] if user.blocked?
       case subject.class.name
       when "Project" then project_abilities(user, subject)
	@@ -2,6 +2,7 @@ class Ability		@@ -2,6 +2,7 @@ class Ability
2	class << self	2	class << self
3	def allowed(user, subject)	3	def allowed(user, subject)
4	return [] unless user.kind_of?(User)	4	return [] unless user.kind_of?(User)
		5	+ return [] if user.blocked?
5		6
6	case subject.class.name	7	case subject.class.name
7	when "Project" then project_abilities(user, subject)	8	when "Project" then project_abilities(user, subject)