Added restriction to group policy. Create link hidden for non-pro.

2019-08-01 19:46:17 +03:00
parent 8c837a0c36
commit 3fa8eb1bac
3 changed files with 10 additions and 2 deletions
--- a/app/controllers/api/v1/groups_controller.rb
+++ b/app/controllers/api/v1/groups_controller.rb
@@ -33,6 +33,8 @@ class Api::V1::GroupsController < Api::BaseController
  end

  def create
+    authorize :group, :create?
+    
    @group = Group.create!(group_params.merge(account: current_account))
    render json: @group, serializer: REST::GroupSerializer
  end