From 4e9cbfd2168dd28e49f6f6644b09e4f7a9d518ca Mon Sep 17 00:00:00 2001 From: Victor Costa Date: Mon, 20 Apr 2015 18:08:30 -0300 Subject: [PATCH] api: fix permission check for article creation --- lib/noosfero/api/v1/articles.rb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/noosfero/api/v1/articles.rb b/lib/noosfero/api/v1/articles.rb index 80bc591..67553ba 100644 --- a/lib/noosfero/api/v1/articles.rb +++ b/lib/noosfero/api/v1/articles.rb @@ -53,7 +53,7 @@ module Noosfero post ':id/children' do parent_article = environment.articles.find(params[:id]) - return forbidden! unless current_person.can_post_content?(parent_article.profile) + return forbidden! unless parent_article.allow_create?(current_person) klass_type= params[:content_type].nil? ? 'TinyMceArticle' : params[:content_type] #FIXME see how to check the article types -- libgit2 0.21.2