From 1a9e4026d9c6121f3da583e34129ca6b7d37a058 Mon Sep 17 00:00:00 2001 From: Pete Matsyburka Date: Sat, 26 Sep 2026 17:06:38 +0300 Subject: [PATCH] guard test mode key only --- app/controllers/testing_api_settings_controller.rb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/app/controllers/testing_api_settings_controller.rb b/app/controllers/testing_api_settings_controller.rb index 6c34fed7f..75269175a 100644 --- a/app/controllers/testing_api_settings_controller.rb +++ b/app/controllers/testing_api_settings_controller.rb @@ -2,6 +2,8 @@ class TestingApiSettingsController < ApplicationController def index + raise CanCan::AccessDenied unless current_account.testing? + authorize!(:manage, current_user.access_token) @webhook_url = current_account.webhook_urls.first_or_initialize