Return empty abilities if user is blocked

diff --git a/app/models/ability.rb b/app/models/ability.rb
index 0b77564..74f92fe 100644 (file)
--- a/app/models/ability.rb
+++ b/app/models/ability.rb
@@ -2,6 +2,7 @@ class Ability
   class << self
     def allowed(user, subject)
       return [] unless user.kind_of?(User)
+      return [] if user.blocked?
 
       case subject.class.name
       when "Project" then project_abilities(user, subject)