raggedstaff/openfoodnetwork
1
0
Fork 0
mirror of https://github.com/openfoodfoundation/openfoodnetwork synced 2026-01-31 21:37:16 +00:00
Code Issues Packages Projects Releases Wiki Activity

Authorize product and not @product

Browse Source
This commit is contained in:
Jean-Baptiste Bellet
2022-07-12 18:49:15 +02:00
parent a80cf37fa6
commit afa40ea82f
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
app/controllers/api/v0/product_images_controller.rb
View File

@@ -7,7 +7,7 @@ module Api
def update_product_image
product = Spree::Product.find(params[:product_id])
authorize! :update, @product
authorize! :update, product
image = product.images.first || Spree::Image.new(
viewable_id: product.master.id,