FIX: only staff can access 'resend all invites' feature

This commit is contained in:
Arpit Jalan
2016-06-07 10:57:08 +05:30
parent a9c6df198c
commit b1a94049e0
3 changed files with 6 additions and 6 deletions

View File

@ -246,6 +246,10 @@ class Guardian
user.staff?
end
def can_resend_all_invites?(user)
user.staff?
end
def can_see_private_messages?(user_id)
is_admin? || (authenticated? && @user.id == user_id)
end