Merge remote-tracking branch 'upstream/pull/5711'

[rails.git] / app / abilities / ability.rb

diff --git a/app/abilities/ability.rb b/app/abilities/ability.rb
index adedce543e0f889ec519e07a378b26e40bd80a15..7f47b578cb5f9bffb2e8b5805f1a591c8acd2322 100644 (file)
--- a/app/abilities/ability.rb
+++ b/app/abilities/ability.rb
@@ -29,14 +29,14 @@ class Ability
 
     if user&.active?
       can :welcome, :site
 
     if user&.active?
       can :welcome, :site

-      can :read, [:deletion, :account_terms, :account_pd_declaration]
+      can :read, [:deletion, :account_terms, :account_pd_declaration, :account_home]

 
       if Settings.status != "database_offline"
         can [:read, :create, :destroy], :changeset_subscription
         can [:read, :create, :update, :destroy], :oauth2_application
         can [:read, :destroy], :oauth2_authorized_application
         can [:read, :create, :destroy], :oauth2_authorization
 
       if Settings.status != "database_offline"
         can [:read, :create, :destroy], :changeset_subscription
         can [:read, :create, :update, :destroy], :oauth2_application
         can [:read, :destroy], :oauth2_authorized_application
         can [:read, :create, :destroy], :oauth2_authorization

-        can [:update, :destroy], :account
+        can [:read, :update, :destroy], :account

         can :update, :account_terms
         can :create, :account_pd_declaration
         can :read, :dashboard
         can :update, :account_terms
         can :create, :account_pd_declaration
         can :read, :dashboard