Hello,

please change the route

/distributions/:id

to include repository id

/repositories/:repository_id/distributions/:id

Permission check has been prepared and after the change is commited it can be enabled:

ebc2e52a3a5da76d159fd9e41e8d7cfbfbbb62c2

Also unit test is ready - just to be uncommented.

In short:

1) Rename the route
2) Change it in the UI/JavaScript code
3) Add new before filter find_product that will fetch @product for given repo id
4) Uncomment the following line:

  #readable = lambda{ @product.readable? }
  readable = lambda{ true } # delete this one

5) Uncomment unit test

Permissions are implemented now.