jbrunton/jbrunton.com

Revisit specs for BlogPostController

Closed this issue · 0 comments

jbrunton commented

The user is an admin in all cases. Should be more fine-grained, and require the least permissions for each action.