Merge pull request #524 from nulib/nu/deploy/staging

Deploy API permissions fix
nulib · Feb 24, 2023 · 1fcf1be · 1fcf1be
2 parents bf7f0bb + 52c051e
commit 1fcf1be
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 2 deletions.
diff --git a/app/models/ability.rb b/app/models/ability.rb
@@ -161,6 +161,11 @@ def custom_permissions(user=nil, session=nil)
         # anyone who can edit a media_object can also push it
         can? :edit, media_object
       end
+
+      can :json_update, MediaObject do |media_object|
+        # anyone who can edit a media_object can also update it via the API
+        is_api_request? && can?(:edit, media_object)
+      end
     end
   end
 

diff --git a/config/puma.rb b/config/puma.rb
@@ -1,4 +1,4 @@
 bind 'tcp://0.0.0.0:3000'
 ssl_bind '0.0.0.0', '3001', 
-  cert: File.join(ENV['HOME'], '.dev_cert', 'dev.rdc.cert.pem'),
-  key: File.join(ENV['HOME'], '.dev_cert', 'dev.rdc.key.pem')
+  cert: ENV['SSL_CERT'],
+  key: ENV['SSL_KEY']