Fix authorization check in domain blocks controller

3 years ago · 7527937758
parent 30e7836a19
commit 7527937758
1 changed files with 1 additions and 0 deletions
--- a/app/controllers/admin/domain_blocks_controller.rb
+++ b/app/controllers/admin/domain_blocks_controller.rb
@ -5,6 +5,7 @@ module Admin
    before_action :set_domain_block, only: [:show, :destroy, :edit, :update]

    def batch
+      authorize :domain_block, :create?
      @form = Form::DomainBlockBatch.new(form_domain_block_batch_params.merge(current_account: current_account, action: action_from_button))
      @form.save
    rescue ActionController::ParameterMissing