From 5c478d2d1a9593f9d1720ea052fa1b4cab77ce93 Mon Sep 17 00:00:00 2001 From: Victor Costa Date: Mon, 20 Apr 2015 18:08:30 -0300 Subject: [PATCH] api: fix permission check for article creation --- lib/noosfero/api/v1/articles.rb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/noosfero/api/v1/articles.rb b/lib/noosfero/api/v1/articles.rb index 80bc591..67553ba 100644 --- a/lib/noosfero/api/v1/articles.rb +++ b/lib/noosfero/api/v1/articles.rb @@ -53,7 +53,7 @@ module Noosfero post ':id/children' do parent_article = environment.articles.find(params[:id]) - return forbidden! unless current_person.can_post_content?(parent_article.profile) + return forbidden! unless parent_article.allow_create?(current_person) klass_type= params[:content_type].nil? ? 'TinyMceArticle' : params[:content_type] #FIXME see how to check the article types -- libgit2 0.21.2