Fix permissions for TeamMembers#index

Robert Speicher
1 parent 02b24cef
Showing 1 changed file with 4 additions and 1 deletions Show diff stats
app/controllers/team_members_controller.rb
@@ -5,7 +5,10 @@ class TeamMembersController &lt; ApplicationController
   # Authorize
   before_filter :add_project_abilities
   before_filter :authorize_read_project!
-  before_filter :authorize_admin_project!, except: [:show]
+  before_filter :authorize_admin_project!, except: [:index, :show]
+
+  def index
+  end
  
   def show
     @team_member = project.users_projects.find(params[:id])
...	...	@@ -5,7 +5,10 @@ class TeamMembersController < ApplicationController
5	5	# Authorize
6	6	before_filter :add_project_abilities
7	7	before_filter :authorize_read_project!
8		- before_filter :authorize_admin_project!, except: [:show]
	8	+ before_filter :authorize_admin_project!, except: [:index, :show]
	9	+
	10	+ def index
	11	+ end
9	12
10	13	def show
11	14	@team_member = project.users_projects.find(params[:id])
...	...