Admin::VoucherController check enterprise permission

This commit is contained in:
Gaetan Craig-Riou
2023-05-05 16:21:21 +10:00
committed by Maikel Linke
parent 355af9e818
commit abf2105df7

View File

@@ -26,7 +26,10 @@ module Admin
private
def load_enterprise
@enterprise = Enterprise.find_by(permalink: params[:enterprise_id])
@enterprise = OpenFoodNetwork::Permissions
.new(spree_current_user)
.editable_enterprises
.find_by(permalink: params[:enterprise_id])
end
def permitted_resource_params