From bdb68f17a97b4d5424556ec10f0ece5d7441f066 Mon Sep 17 00:00:00 2001 From: Justin Edmund Date: Thu, 2 Feb 2023 02:28:46 -0800 Subject: [PATCH] Fix bug in party controller authorization --- app/controllers/api/v1/parties_controller.rb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/app/controllers/api/v1/parties_controller.rb b/app/controllers/api/v1/parties_controller.rb index 6906aff..f1b4249 100644 --- a/app/controllers/api/v1/parties_controller.rb +++ b/app/controllers/api/v1/parties_controller.rb @@ -122,7 +122,7 @@ module Api private def authorize - render_unauthorized_response if @character.party.user != current_user || @party.edit_key != edit_key + render_unauthorized_response if @party.user != current_user || @party.edit_key != edit_key end def build_conditions(params)