app/controllers/application_controller.rb
# Prevent CSRF attacks by raising an exception.
# For APIs, you may want to use :null_session instead.
Prevent CSRF attacks by raising an exception.
For APIs, you may want to use :null_session instead.
Prevent CSRF attacks by raising an exception . For APIs you may want to use : null_session instead .
def must_be_subscription_owner
    unless current_user_is_subscription_owner?
      deny_access("You must be the owner of this subscription")
    end
  end
def must_be_subscription_owner unless current_user_is_subscription_owner? deny_access ( "You must be the owner of this subscription" ) end end
Prevent CSRF attacks by raising an exception.
Prevent CSRF attacks by raising an exception .