skip some CSRF stuff

We'll properly implement authentication later
pull/501/head
Ryan Arakawa 4 months ago
parent eaeb5ad07f
commit 4ec993cd4d

@ -1,6 +1,7 @@
# frozen_string_literal: true # frozen_string_literal: true
class EmailSmtpSettingsController < ApplicationController class EmailSmtpSettingsController < ApplicationController
skip_before_action :verify_authenticity_token
before_action :load_encrypted_config before_action :load_encrypted_config
authorize_resource :encrypted_config, only: :index authorize_resource :encrypted_config, only: :index
authorize_resource :encrypted_config, parent: false, only: :create authorize_resource :encrypted_config, parent: false, only: :create

@ -1,6 +1,7 @@
# frozen_string_literal: true # frozen_string_literal: true
class SubmissionsController < ApplicationController class SubmissionsController < ApplicationController
skip_before_action :verify_authenticity_token
before_action :load_template, only: %i[new create] before_action :load_template, only: %i[new create]
authorize_resource :template, only: %i[new create] authorize_resource :template, only: %i[new create]

@ -1,6 +1,7 @@
# frozen_string_literal: true # frozen_string_literal: true
class TemplateDocumentsController < ApplicationController class TemplateDocumentsController < ApplicationController
skip_before_action :verify_authenticity_token
load_and_authorize_resource :template load_and_authorize_resource :template
def create def create

Loading…
Cancel
Save