X-Git-Url: https://git.openstreetmap.org./rails.git/blobdiff_plain/017f7da76f3d59a71c3cca481e0d3a20afe1c046..18f65b78ebe02d96861991880056c7abb07c299e:/app/abilities/api_ability.rb?ds=sidebyside diff --git a/app/abilities/api_ability.rb b/app/abilities/api_ability.rb index 4ed9708b4..c74a4d099 100644 --- a/app/abilities/api_ability.rb +++ b/app/abilities/api_ability.rb @@ -29,18 +29,16 @@ class ApiAbility can [:create, :update, :destroy], Trace if scope?(token, :write_gpx) can :details, User if scope?(token, :read_prefs) - can :gpx_files, User if scope?(token, :read_gpx) - can :read, UserPreference if scope?(token, :read_prefs) can [:update, :update_all, :destroy], UserPreference if scope?(token, :write_prefs) - can [:inbox, :outbox, :read, :update, :destroy], Message if scope?(token, :consume_messages) + can [:read, :update, :destroy], Message if scope?(token, :consume_messages) can :create, Message if scope?(token, :send_messages) if user.terms_agreed? can [:create, :update, :upload, :close, :subscribe, :unsubscribe], Changeset if scope?(token, :write_api) can :create, ChangesetComment if scope?(token, :write_api) - can [:create, :update, :delete], [Node, Way, Relation] if scope?(token, :write_api) + can [:create, :update, :destroy], [Node, Way, Relation] if scope?(token, :write_api) end if user.moderator?