X-Git-Url: https://git.openstreetmap.org./rails.git/blobdiff_plain/cdce867183b71a2fe13686d2cc7fd826f5b23043..51dab659f55476460a5c89aac43c148ff0e4dba4:/app/abilities/api_ability.rb diff --git a/app/abilities/api_ability.rb b/app/abilities/api_ability.rb index 4ed9708b4..c74a4d099 100644 --- a/app/abilities/api_ability.rb +++ b/app/abilities/api_ability.rb @@ -29,18 +29,16 @@ class ApiAbility can [:create, :update, :destroy], Trace if scope?(token, :write_gpx) can :details, User if scope?(token, :read_prefs) - can :gpx_files, User if scope?(token, :read_gpx) - can :read, UserPreference if scope?(token, :read_prefs) can [:update, :update_all, :destroy], UserPreference if scope?(token, :write_prefs) - can [:inbox, :outbox, :read, :update, :destroy], Message if scope?(token, :consume_messages) + can [:read, :update, :destroy], Message if scope?(token, :consume_messages) can :create, Message if scope?(token, :send_messages) if user.terms_agreed? can [:create, :update, :upload, :close, :subscribe, :unsubscribe], Changeset if scope?(token, :write_api) can :create, ChangesetComment if scope?(token, :write_api) - can [:create, :update, :delete], [Node, Way, Relation] if scope?(token, :write_api) + can [:create, :update, :destroy], [Node, Way, Relation] if scope?(token, :write_api) end if user.moderator?