fix abilities

app/helpers/admin/application_helper.rb

@@ -46,8 +46,9 @@ module Admin::ApplicationHelper
   end
 
   def duplicate_link(object)
+    return unless can?(:update, object)
     link_to t('admin.duplicate'),
-            [:duplicate, :admin, object], 
+            [:duplicate, :admin, object],
             method: :post,
             data: { confirm: t('please_confirm') },
             class: button_classes('btn-light')
@@ -96,7 +97,7 @@ module Admin::ApplicationHelper
     text = indent text, depth
     raw text
   end
-  
+
   def indent(text, depth)
     indentation = '  ' * depth
     # Remove useless \r

app/models/ability.rb

@@ -71,6 +71,7 @@ class Ability
   def website_manager
     managed_websites_ids = @user.websites_to_manage.pluck(:communication_website_id)
     managed_pages_ids = Communication::Website::Page.where(communication_website_id: managed_websites_ids).pluck(:id)
+    managed_posts_ids = Communication::Website::Post.where(communication_website_id: managed_websites_ids).pluck(:id)
     can :read, Communication::Website, university_id: @user.university_id, id: managed_websites_ids
     can :analytics, Communication::Website, university_id: @user.university_id, id: managed_websites_ids
     can :manage, Communication::Website::Page, university_id: @user.university_id, communication_website_id: managed_websites_ids
@@ -81,6 +82,7 @@ class Ability
     can :create, Communication::Website::Menu::Item, university_id: @user.university_id
     can :manage, University::Organization, university_id: @user.university_id
     can :manage, Communication::Block, university_id: @user.university_id, about_type: 'Communication::Website::Page', about_id: managed_pages_ids
+    can :manage, Communication::Block, university_id: @user.university_id, about_type: 'Communication::Website::Post', about_id: managed_posts_ids
     can :create, Communication::Block
   end