diff --git a/lib/philomena_web/controllers/admin/report_controller.ex b/lib/philomena_web/controllers/admin/report_controller.ex index fa791015..5a2f032c 100644 --- a/lib/philomena_web/controllers/admin/report_controller.ex +++ b/lib/philomena_web/controllers/admin/report_controller.ex @@ -8,6 +8,7 @@ defmodule PhilomenaWeb.Admin.ReportController do alias Philomena.Repo import Ecto.Query + plug :verify_authorized plug :load_and_authorize_resource, model: Report, only: [:show], preload: [:admin, user: [:linked_tags, awards: :badge]] def index(conn, %{"rq" => query_string}) do @@ -80,4 +81,11 @@ defmodule PhilomenaWeb.Admin.ReportController do %{created_at: :desc} ] end + + defp verify_authorized(conn, _opts) do + case Canada.Can.can?(conn.assigns.current_user, :index, Report) do + true -> conn + false -> PhilomenaWeb.NotAuthorizedPlug.call(conn) + end + end end \ No newline at end of file