oops add security
This commit is contained in:
parent
6067795780
commit
29c8d2ebec
|
@ -7,7 +7,9 @@
|
||||||
<th class='num topics'>{{i18n categories.topics}}</th>
|
<th class='num topics'>{{i18n categories.topics}}</th>
|
||||||
<th class='num posts'>{{i18n categories.posts}}</th>
|
<th class='num posts'>{{i18n categories.posts}}</th>
|
||||||
<th class='latest'>{{i18n categories.latest}}
|
<th class='latest'>{{i18n categories.latest}}
|
||||||
|
{{#if canEdit}}
|
||||||
<button title='{{i18n categories.toggle_ordering}}' class='btn toggle-admin no-text' {{action toggleOrdering}}><i class='icon icon-wrench'></i></button>
|
<button title='{{i18n categories.toggle_ordering}}' class='btn toggle-admin no-text' {{action toggleOrdering}}><i class='icon icon-wrench'></i></button>
|
||||||
|
{{/if}}
|
||||||
</th>
|
</th>
|
||||||
</tr>
|
</tr>
|
||||||
</thead>
|
</thead>
|
||||||
|
|
|
@ -29,6 +29,8 @@ class CategoriesController < ApplicationController
|
||||||
end
|
end
|
||||||
|
|
||||||
def move
|
def move
|
||||||
|
guardian.ensure_can_create!(Category)
|
||||||
|
|
||||||
params.require("category_id")
|
params.require("category_id")
|
||||||
params.require("position")
|
params.require("position")
|
||||||
|
|
||||||
|
|
Loading…
Reference in New Issue