use cancan

2026-02-14 19:13:05 +02:00
parent 871ef6dda6
commit 12c5b909e0
1 changed files with 1 additions and 1 deletions
@@ -57,7 +57,7 @@ class SubmissionsDownloadController < ApplicationController
  end

  def current_user_submitter?(submitter)
-    current_user && current_user.account.submitters.exists?(id: submitter.id)
+    current_user && current_ability.can?(:read, submitter)
  end

  def build_urls(submitter)