Authorize user on note update

Jack Weeden
1 parent 20b2a0b2
Showing 1 changed file with 1 additions and 0 deletions Show diff stats
app/controllers/notes_controller.rb
@@ -2,6 +2,7 @@ class NotesController &lt; ProjectResourceController
   # Authorize
   before_filter :authorize_read_note!
   before_filter :authorize_write_note!, only: [:create]
+  before_filter :authorize_modify_note!, only: [:update]
  
   respond_to :js
...	...	@@ -2,6 +2,7 @@ class NotesController < ProjectResourceController
2	2	# Authorize
3	3	before_filter :authorize_read_note!
4	4	before_filter :authorize_write_note!, only: [:create]
	5	+ before_filter :authorize_modify_note!, only: [:update]
5	6
6	7	respond_to :js
7	8
...	...