Jerome Doyle

Thanks for the reply. I've opened an issue on the repo. Direct link https://github.com/refile/r...

How would you do authorization on uploaded files with Pundit? I have uploaded files which should be restricted to the user that uploaded them, but anyone with the url that attachment_url generates can access the file. Since Refile uses the sinatra app, there's no controller for me to call Pundit's authorize method in.