app/controllers/decidim/meetings/admin/meeting_closes_controller.rb in decidim-meetings-0.11.2 vs app/controllers/decidim/meetings/admin/meeting_closes_controller.rb in decidim-meetings-0.12.0.pre

@@ -6,13 +6,17 @@
       # This controller allows an admin to manage meetings from a Participatory Process
       class MeetingClosesController < Admin::ApplicationController
         helper_method :meeting
 
         def edit
+          enforce_permission_to :close, :meeting, meeting: meeting
+
           @form = form(CloseMeetingForm).from_model(meeting)
         end
 
         def update
+          enforce_permission_to :close, :meeting, meeting: meeting
+
           @form = form(CloseMeetingForm).from_params(params.merge(proposals: meeting.sibling_scope(:proposals)))
 
           CloseMeeting.call(@form, meeting) do
             on(:ok) do
               flash[:notice] = I18n.t("meetings.close.success", scope: "decidim.meetings.admin")