Download as
Browse Code »

Commit 4e9cbfd2168dd28e49f6f6644b09e4f7a9d518ca

Authored by Victor Costa
Committed by Rodrigo Souto
1 parent a080e669
Exists in api_tasks and in 4 other branches add_fields_in_api, api_fixies, api_pagination, api_private_token

api: fix permission check for article creation

Showing 1 changed file with 1 additions and 1 deletions   Show diff stats
lib/noosfero/api/v1/articles.rb
  Diff comments   View file @4e9cbfd
@@ -53,7 +53,7 @@ module Noosfero @@ -53,7 +53,7 @@ module Noosfero
53 post ':id/children' do 53 post ':id/children' do
54 54
55 parent_article = environment.articles.find(params[:id]) 55 parent_article = environment.articles.find(params[:id])
56 - return forbidden! unless current_person.can_post_content?(parent_article.profile) 56 + return forbidden! unless parent_article.allow_create?(current_person)
57 57
58 klass_type= params[:content_type].nil? ? 'TinyMceArticle' : params[:content_type] 58 klass_type= params[:content_type].nil? ? 'TinyMceArticle' : params[:content_type]
59 #FIXME see how to check the article types 59 #FIXME see how to check the article types