Fix wrong policy authorization in admin controllers (#35588)

2025-07-30 09:17:53 -04:00
parent 3146109b08
commit 139025fce0
2 changed files with 2 additions and 2 deletions
--- a/app/controllers/admin/disputes/appeals_controller.rb
+++ b/app/controllers/admin/disputes/appeals_controller.rb
@@ -18,7 +18,7 @@ class Admin::Disputes::AppealsController < Admin::BaseController
  end

  def reject
-    authorize @appeal, :approve?
+    authorize @appeal, :reject?
    log_action :reject, @appeal
    @appeal.reject!(current_account)
    UserMailer.appeal_rejected(@appeal.account.user, @appeal).deliver_later