Some more tweaks to have billing code work, and allow admins to view but not edit for other users.

1 files changed, 5 insertions, 2 deletions

diff --git a/billing/config/routes.rb b/billing/config/routes.rb
index 1bb32df..8b7b5bf 100644
--- a/billing/config/routes.rb
+++ b/billing/config/routes.rb
@@ -2,7 +2,10 @@ Rails.application.routes.draw do
 
   match 'payments/new' => 'payments#new', :as => :new_payment
   match 'payments/confirm' => 'payments#confirm', :as => :confirm_payment
-  resources :payments, :only => [:index]
+  resources :users do
+    resources :payments, :only => [:index]
+    resources :subscriptions, :only => [:index, :show]
+  end
 
   resources :customer, :only => [:new, :edit]
   resources :credit_card_info, :only => [:edit]
@@ -11,7 +14,7 @@ Rails.application.routes.draw do
   match 'customer/show/:id' => 'customer#show', :as => :show_customer
   match 'credit_card_info/confirm' => 'credit_card_info#confirm', :as => :confirm_credit_card_info
 
-  resources :subscriptions, :only => [:new, :create, :index, :show, :update, :destroy]
+  resources :subscriptions, :only => [:new, :create, :update, :destroy] # index and show are within users path
 
   #match 'transactions/:product_id/new' => 'transactions#new', :as => :new_transaction
   #match 'transactions/confirm/:product_id' => 'transactions#confirm', :as => :confirm_transaction