6
7
8
9
10
11
12
13
14
15
16
17
|
# File 'app/controllers/collavre/invites_controller.rb', line 6
def create
creative = Creative.find(params[:creative_id]).effective_origin
unless creative.has_permission?(Current.user, :admin)
return head :forbidden
end
permission = params[:permission] || :read
invitation = Invitation.create!(inviter: Current.user,
creative: creative,
permission: permission,
email: params[:email].presence)
render json: { url: invite_url(token: invitation.generate_token_for(:invite)) }
end
|