app/controllers/decidim/meetings/admin/registrations_controller.rb in decidim-meetings-0.11.2 vs app/controllers/decidim/meetings/admin/registrations_controller.rb in decidim-meetings-0.12.0.pre

@@ -4,14 +4,18 @@
   module Meetings
     module Admin
       # This controller allows an admin to manage meeting registrations from a Participatory Process
       class RegistrationsController < Admin::ApplicationController
         def edit
+          enforce_permission_to :update, :meeting, meeting: meeting
+
           @form = MeetingRegistrationsForm.from_model(meeting)
         end
 
         def update
+          enforce_permission_to :update, :meeting, meeting: meeting
+
           @form = MeetingRegistrationsForm.from_params(params).with_context(current_organization: meeting.organization, meeting: meeting)
 
           UpdateRegistrations.call(@form, meeting) do
             on(:ok) do
               flash[:notice] = I18n.t("registrations.update.success", scope: "decidim.meetings.admin")
@@ -24,9 +28,11 @@
             end
           end
         end
 
         def export
+          enforce_permission_to :export_registrations, :meeting, meeting: meeting
+
           ExportMeetingRegistrations.call(meeting, params[:format], current_user) do
             on(:ok) do |export_data|
               send_data export_data.read, type: "text/#{export_data.extension}", filename: export_data.filename("registrations")
             end
           end