7a033da7ed
NpoDonationsController: requireAuth() checks on listDonations and createDonation (npo.donations permission). Matches access.xml actions.