add cancan for authorization

app/controllers/templates_archived_submissions_controller.rb

@@ -1,13 +1,14 @@
 # frozen_string_literal: true
 
 class TemplatesArchivedSubmissionsController < ApplicationController
-  def show
-    @template = current_account.templates.find(params[:template_id])
+  load_and_authorize_resource :template
+  load_and_authorize_resource :submission, through: :template, parent: false
 
-    submissions = @template.submissions.where.not(deleted_at: nil)
-    submissions = Submissions.search(submissions, params[:q])
+  def index
+    @submissions = @submissions.where.not(deleted_at: nil)
+    @submissions = Submissions.search(@submissions, params[:q])
 
-    @pagy, @submissions = pagy(submissions.preload(:submitters).order(id: :desc))
+    @pagy, @submissions = pagy(@submissions.preload(:submitters).order(id: :desc))
   rescue ActiveRecord::RecordNotFound
     redirect_to root_path
   end