discourse-subscriptions/spec/requests/admin
Justin DiRose 227c55e6f5
FIX: Restrict mods from seeing Subscriptions admin features (#70)
As reported [on Meta](https://meta.discourse.org/t/discourse-subscriptions/140818/352?u=justin), moderators could access all of the subscriptions data (plugins/prices/subscribers) and manage them. This should not be the case, so this PR adds a route constraint to 404 moderators from these routes.
2021-06-08 17:24:13 -05:00
..
coupons_controller_spec.rb FIX: Restrict mods from seeing Subscriptions admin features (#70) 2021-06-08 17:24:13 -05:00
plans_controller_spec.rb FIX: Restrict mods from seeing Subscriptions admin features (#70) 2021-06-08 17:24:13 -05:00
products_controller_spec.rb FIX: Restrict mods from seeing Subscriptions admin features (#70) 2021-06-08 17:24:13 -05:00
subscriptions_controller_spec.rb FIX: Restrict mods from seeing Subscriptions admin features (#70) 2021-06-08 17:24:13 -05:00