use cancan

1 month ago · 12c5b909e0
parent 871ef6dda6
commit 12c5b909e0
1 changed files with 1 additions and 1 deletions
--- a/app/controllers/submissions_download_controller.rb
+++ b/app/controllers/submissions_download_controller.rb
@ -57,7 +57,7 @@ class SubmissionsDownloadController < ApplicationController
  end

  def current_user_submitter?(submitter)
-    current_user && current_user.account.submitters.exists?(id: submitter.id)
+    current_user && current_ability.can?(:read, submitter)
  end

  def build_urls(submitter)