Fix permissions

2018-03-13 15:27:34 +01:00 · 2018-03-13 15:27:34 +01:00 · 8285874483
commit 8285874483
parent eae4a3e99c
1 changed files with 1 additions and 1 deletions
--- a/app/models/user_ability.rb
+++ b/app/models/user_ability.rb
@ -9,7 +9,7 @@ class UserAbility
    can :manage, Request,      creditor_id: user.id
    can :manage, Notification, user_id: user.id
    can :create, Transaction do |t|
-      t.debtor == user && t.amount <= Rails.application.config.maximum_amount
+      t.debtor == user && (t.debtor.balance - t.amount >= 0 || t.debtor.debt_allowed?)
    end
  end
 end