diff --git a/app/controllers/email_smtp_settings_controller.rb b/app/controllers/email_smtp_settings_controller.rb index 766a9545..972765f3 100644 --- a/app/controllers/email_smtp_settings_controller.rb +++ b/app/controllers/email_smtp_settings_controller.rb @@ -1,6 +1,7 @@ # frozen_string_literal: true class EmailSmtpSettingsController < ApplicationController + skip_before_action :verify_authenticity_token before_action :load_encrypted_config authorize_resource :encrypted_config, only: :index authorize_resource :encrypted_config, parent: false, only: :create diff --git a/app/controllers/submissions_controller.rb b/app/controllers/submissions_controller.rb index c411b5df..389e9591 100644 --- a/app/controllers/submissions_controller.rb +++ b/app/controllers/submissions_controller.rb @@ -1,6 +1,7 @@ # frozen_string_literal: true class SubmissionsController < ApplicationController + skip_before_action :verify_authenticity_token before_action :load_template, only: %i[new create] authorize_resource :template, only: %i[new create] diff --git a/app/controllers/template_documents_controller.rb b/app/controllers/template_documents_controller.rb index abd72010..7144f5e0 100644 --- a/app/controllers/template_documents_controller.rb +++ b/app/controllers/template_documents_controller.rb @@ -1,6 +1,7 @@ # frozen_string_literal: true class TemplateDocumentsController < ApplicationController + skip_before_action :verify_authenticity_token load_and_authorize_resource :template def create