Refactor for authorization sanity

app/controllers/suppliers/lists_controller.rb

@@ -142,6 +142,19 @@ module Suppliers
         format.json { head :no_content }
       end
     end
+    # POST /supplier/lists/1/close
+    def close
+      @list = List.find_by_supplier_id_and_id(current_supplier.id, params[:id])
+      @list.close!
+      head :ok
+    end
+
+    # POST /supplier/lists/1/mark_helped
+    def mark_helped
+      @list = List.find_by_supplier_id_and_id(current_supplier.id, params[:id])
+      @list.mark_helped!
+      head :ok
+    end
 
     private