|
|
|
@ -207,6 +207,7 @@ private |
|
|
|
if action_name == "create" |
|
|
|
if action_name == "create" |
|
|
|
head :unauthorized and return unless current_user.data_coordinator? || current_user.support? |
|
|
|
head :unauthorized and return unless current_user.data_coordinator? || current_user.support? |
|
|
|
else |
|
|
|
else |
|
|
|
|
|
|
|
render_not_found and return if @user.status == :deleted |
|
|
|
render_not_found and return unless (current_user.organisation == @user.organisation) || current_user.support? |
|
|
|
render_not_found and return unless (current_user.organisation == @user.organisation) || current_user.support? |
|
|
|
render_not_found and return if action_name == "edit_password" && current_user != @user |
|
|
|
render_not_found and return if action_name == "edit_password" && current_user != @user |
|
|
|
render_not_found and return unless action_name == "show" || |
|
|
|
render_not_found and return unless action_name == "show" || |
|
|
|
|