227c55e6f5
As reported [on Meta](https://meta.discourse.org/t/discourse-subscriptions/140818/352?u=justin), moderators could access all of the subscriptions data (plugins/prices/subscribers) and manage them. This should not be the case, so this PR adds a route constraint to 404 moderators from these routes. |
||
---|---|---|
.. | ||
coupons_controller_spec.rb | ||
plans_controller_spec.rb | ||
products_controller_spec.rb | ||
subscriptions_controller_spec.rb |