[openstreetmap/openstreetmap-website] WIP: Move to CanCanCan for authorization (#2023)

[Andy Allan]

I've pushed a few more changes, in particular a slight reworking of the token handling which I think makes the behaviour more obvious.

I also tried to convert another couple of controllers, but realised that there's a few edge cases in each case which deserve their own PR, so I don't think I'll expand the scope of this any further yet!

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/openstreetmap/openstreetmap-website/pull/2023#issuecomment-432600481
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstreetmap.org/pipermail/rails-dev/attachments/20181024/2a5ad095/attachment-0001.html>