discourse-subscriptions/spec/requests
Justin DiRose 227c55e6f5
FIX: Restrict mods from seeing Subscriptions admin features (#70)
As reported [on Meta](https://meta.discourse.org/t/discourse-subscriptions/140818/352?u=justin), moderators could access all of the subscriptions data (plugins/prices/subscribers) and manage them. This should not be the case, so this PR adds a route constraint to 404 moderators from these routes.
2021-06-08 17:24:13 -05:00
..
admin FIX: Restrict mods from seeing Subscriptions admin features (#70) 2021-06-08 17:24:13 -05:00
user FEATURE: Cancel payments at end of subscription vs immediately 2020-08-19 14:37:47 -05:00
admin_controller_spec.rb name space module 2019-12-04 11:23:45 +11:00
hooks_controller_spec.rb add the user to the group if subscription is completing 2020-01-26 10:49:51 +11:00
subscribe_controller_spec.rb FEATURE: Campaigns (#67) 2021-06-02 13:15:03 -05:00