Cleaned up authorization

git-svn-id: https://dev.finn.de/svn/cockpit/trunk@501 7926756e-e54e-46e6-9721-ed318f58905e
15 years ago · c1c78cd303
parent 90d1246948
commit c1c78cd303
1 changed files with 3 additions and 3 deletions
--- a/app/controllers/cost_objects_controller.rb
+++ b/app/controllers/cost_objects_controller.rb
@ -9,11 +9,11 @@ class CostObjectsController < ApplicationController
  ]
  before_filter :find_optional_project, :only => [:index]

-  # :new action is authorized in the action itself
-  # all other actions listed here are unrestricted
  before_filter :authorize, :except => [
+    # authorization in find_optional_project
+    :index,
    # unrestricted actions
-    :index, :preview, :context_menu,
+    :preview, :context_menu,
    :update_material_budget_item, :update_labor_budget_item
    ]