From 12c5b909e04b5de9ddcb55a2f1a3d05e9dfb1bff Mon Sep 17 00:00:00 2001 From: Pete Matsyburka Date: Sat, 14 Feb 2026 19:13:05 +0200 Subject: [PATCH] use cancan --- app/controllers/submissions_download_controller.rb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/app/controllers/submissions_download_controller.rb b/app/controllers/submissions_download_controller.rb index 8e76039b..eb216bc5 100644 --- a/app/controllers/submissions_download_controller.rb +++ b/app/controllers/submissions_download_controller.rb @@ -57,7 +57,7 @@ class SubmissionsDownloadController < ApplicationController end def current_user_submitter?(submitter) - current_user && current_user.account.submitters.exists?(id: submitter.id) + current_user && current_ability.can?(:read, submitter) end def build_urls(submitter)