Closed
Description
Problem
I'm not 100% positive on this, but we likely need a :show
endpoint in ConversationController
Subtasks
- Implement
show?
policycurrent_user
is authorized ifconversation.user_id == current_user.id
current_user
is also authorized ifconversation.message.author_id == current_user.id
current_user
is also authorized if they are admin or higher onconversation.message.project
- write tests for policy
- Implement show endpoint in
ConversationController
- fetches by
id
- authorizes using policy
- fetches by
- write tests for controller