Use correct policy class is search controller

The authorization_policy on the resource should be used when set.
avo-hq · Jun 1, 2024 · 868fb02 · 868fb02
1 parent 748c09d
commit 868fb02
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/app/controllers/avo/search_controller.rb b/app/controllers/avo/search_controller.rb
@@ -20,7 +20,11 @@ def search_resources(resources)
       resources
         .map do |resource|
           # Apply authorization
-          next unless @authorization.set_record(resource.model_class).authorize_action(:search, raise_exception: false)
+          next unless @authorization.set_record(resource.model_class).authorize_action(
+            :search,
+            policy_class: resource.authorization_policy,
+            raise_exception: false
+          )
           # Filter out the models without a search_query
           next if resource.search_query.nil?