diff --git a/app/controllers/api/v1/grid_weapons_controller.rb b/app/controllers/api/v1/grid_weapons_controller.rb index f92268c..d142ca2 100644 --- a/app/controllers/api/v1/grid_weapons_controller.rb +++ b/app/controllers/api/v1/grid_weapons_controller.rb @@ -2,13 +2,17 @@ class Api::V1::GridWeaponsController < Api::V1::ApiController def create party = Party.find(weapon_params[:party_id]) canonical_weapon = Weapon.find(weapon_params[:weapon_id]) + + if current_user + if party.user != current_user + render_unauthorized_response + end + end if grid_weapon = GridWeapon.where( party_id: party.id, position: weapon_params[:position] ).first - ap "Grid weapon found!" - ap grid_weapon GridWeapon.destroy(grid_weapon.id) end diff --git a/app/views/api/v1/grid_weapons/base.json.rabl b/app/views/api/v1/grid_weapons/base.json.rabl index 948a36a..e249156 100644 --- a/app/views/api/v1/grid_weapons/base.json.rabl +++ b/app/views/api/v1/grid_weapons/base.json.rabl @@ -1,4 +1,5 @@ attributes :id, + :party_id, :mainhand, :position diff --git a/app/views/api/v1/grid_weapons/show.json.rabl b/app/views/api/v1/grid_weapons/show.json.rabl index 55b92ab..cd450b3 100644 --- a/app/views/api/v1/grid_weapons/show.json.rabl +++ b/app/views/api/v1/grid_weapons/show.json.rabl @@ -1,3 +1,3 @@ -object @grid_weapon +object @weapon extends 'api/v1/grid_weapons/base' \ No newline at end of file