Use CanCanCan for directions controller

diff --git a/app/abilities/ability.rb b/app/abilities/ability.rb
index b5026196fb8b67fe8e0469462c94dfe81b1ab048..fa0e30f03b38ac1c7681deb87c67538d2502ae15 100644 (file)
--- a/app/abilities/ability.rb
+++ b/app/abilities/ability.rb
@@ -6,6 +6,7 @@ class Ability
   def initialize(user)
     can [:relation, :relation_history, :way, :way_history, :node, :node_history, :changeset, :note], :browse
     can :index, ChangesetComment
   def initialize(user)
     can [:relation, :relation_history, :way, :way_history, :node, :node_history, :changeset, :note], :browse
     can :index, ChangesetComment

+    can :search, :direction

     can [:index, :permalink, :edit, :help, :fixthemap, :offline, :export, :about, :preview, :copyright, :key, :id], :site
     can [:index, :rss, :show, :comments], DiaryEntry
     can [:finish, :embed], :export
     can [:index, :permalink, :edit, :help, :fixthemap, :offline, :export, :about, :preview, :copyright, :key, :id], :site
     can [:index, :rss, :show, :comments], DiaryEntry
     can [:finish, :embed], :export

diff --git a/app/controllers/directions_controller.rb b/app/controllers/directions_controller.rb
index b04db6b6f6aea919cb99fa84fdda5283efb9d37b..ec23274006b8062d30bc84dda00752d4d9cfd54f 100644 (file)
--- a/app/controllers/directions_controller.rb
+++ b/app/controllers/directions_controller.rb
@@ -2,6 +2,7 @@ class DirectionsController < ApplicationController
   before_action :authorize_web
   before_action :set_locale
   before_action :require_oauth, :only => [:search]
   before_action :authorize_web
   before_action :set_locale
   before_action :require_oauth, :only => [:search]

+  authorize_resource :class => false

 
   def search
     render :layout => map_layout
 
   def search
     render :layout => map_layout