[openstreetmap/openstreetmap-website] Use CanCanCan for oauth controller (#2116)

[Andy Allan]

This PR marks non-action methods in the oauth controller as protected, and uses CanCanCan for access control for the actions.
You can view, comment on, or merge this pull request online at:

  https://github.com/openstreetmap/openstreetmap-website/pull/2116

-- Commit Summary --

  * Mark non-action methods as protected
  * Use CanCanCan to control access to oauth controller actions

-- File Changes --

    M app/abilities/ability.rb (2)
    M app/controllers/oauth_controller.rb (27)

-- Patch Links --

https://github.com/openstreetmap/openstreetmap-website/pull/2116.patch
https://github.com/openstreetmap/openstreetmap-website/pull/2116.diff

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/openstreetmap/openstreetmap-website/pull/2116
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstreetmap.org/pipermail/rails-dev/attachments/20190116/5b8f63d9/attachment.html>