diff --git a/app/controllers/api/v1/grid_weapons_controller.rb b/app/controllers/api/v1/grid_weapons_controller.rb index 2363515..a2dfa7a 100644 --- a/app/controllers/api/v1/grid_weapons_controller.rb +++ b/app/controllers/api/v1/grid_weapons_controller.rb @@ -30,7 +30,7 @@ class Api::V1::GridWeaponsController < Api::V1::ApiController def update if current_user - if party.user != current_user + if @weapon.party.user != current_user render_unauthorized_response end end