Download as
Browse Code »

Commit 5a875c906ab8b8393840aafcaa98800ca99e3be6

Authored by Victor Costa
Committed by Rodrigo Souto
1 parent 20b57b8d
Exists in master and in 29 other branches add_member_task_reject_details, admin_visible_profile, article-list-template, community_notifications, contact_admin_translation, event_fixes, fix_comments_pagination, fix_rails4_organization_ratings, fix_sign_up_form, follow_step_fix, forum_topic_creation, mirror_block_improvements, multi_env_on_remote_user, new_security, noosfero_spb_ci, organization_ratings_improvements, organization_ratings_link_to_profile_stable-spb-1.3, organization_ratings_translations_fix, profile_api_improvements, ratings_minor_fixes, remote_user_fix, send_email_to_admins, stable-spb-1.3, stable-spb-1.3-fixes, stable-spb-1.4, stable-spb-1.5, suggest_rejected_value, web_steps_improvements, xss_terminate_custom_options

api: fix permission check for article creation

Showing 1 changed file with 1 additions and 1 deletions   Show diff stats
lib/noosfero/api/v1/articles.rb
  Diff comments   View file @5a875c9
... ... @@ -53,7 +53,7 @@ module Noosfero
53 53 post ':id/children' do
54 54  
55 55 parent_article = environment.articles.find(params[:id])
56   - return forbidden! unless current_person.can_post_content?(parent_article.profile)
  56 + return forbidden! unless parent_article.allow_create?(current_person)
57 57  
58 58 klass_type= params[:content_type].nil? ? 'TinyMceArticle' : params[:content_type]
59 59 #FIXME see how to check the article types
... ...