Jeremy Evans 1d1d1fb3fc Enforce project location access in routes ...

In the routes, when a location is given, check that is either available
for all projects, or that it is tied to the current project.

This adds:

* Location.for_project: Filters to only locations not tied to projects,
  and those tied to the given project.

* Location:visible_or_for_project: Filters to only visible locations not
  tied to projects, and those tied to the given project.

* Location#visible_or_for_project?: Checks whether the location is
  either visible and not tied to a project, or is tied to the given
  project.

2025-04-07 08:53:50 -07:00

389 B

Raw Permalink Blame History

View Raw