Where is the equivalent for `@view.readable?`.

Every resource that's being worked on in the controller should be searched with the autorization scope in place, such as https://github.com/theforeman/foreman/blob/develop/app/controllers/api/v2/config_templates_controller.rb#L21

The code you sent is handling just one part of it and I don't consider that itself being enough.

----- Original Message -----
> > @@ -16,25 +16,9 @@ class Api::V2::ContentViewFiltersController <
> > Api::V2::ApiController
> >    before_filter :find_content_view
> >    before_filter :find_filter, :except => [:index, :create]
> >    before_filter :load_search_service, :only => [:index, :available_errata,
> >    :available_package_groups]
> > -  before_filter :authorize
> 
> @iNecas the `before_filter :authorize` is no longer necessary as
> authorization is called automatically:
> https://github.com/Katello/katello/blob/roles/app/controllers/katello/api/api_controller.rb#L40
> 
> ---
> Reply to this email directly or view it on GitHub:
> https://github.com/Katello/katello/pull/4073/files#r12633497