Modified: branches/packs/app/views/packs/_resource_tiles.html.erb (3649 => 3650)
--- branches/packs/app/views/packs/_resource_tiles.html.erb 2013-09-01 13:32:51 UTC (rev 3649)
+++ branches/packs/app/views/packs/_resource_tiles.html.erb 2013-09-01 14:43:50 UTC (rev 3650)
@@ -9,6 +9,8 @@
<% resources.each do |resource| %>
<% ore_path = resource.ore_path %>
<% next unless ore_path %>
- <%= render :partial => "resource_tile", :locals => { :pack => pack, :resource => resource } -%>
+ <% if Authorization.check('view', resource, current_user) %>
+ <%= render :partial => "resource_tile", :locals => { :pack => pack, :resource => resource } -%>
+ <% end %>
<% end %>
</table>
Modified: branches/packs/lib/authorization.rb (3649 => 3650)
--- branches/packs/lib/authorization.rb 2013-09-01 13:32:51 UTC (rev 3649)
+++ branches/packs/lib/authorization.rb 2013-09-01 14:43:50 UTC (rev 3650)
@@ -397,7 +397,7 @@
return Authorization.check('view', object.pack_contributable_entry, user)
end
- return false
+ return true
when "create"