From 756cd09fa59452f3e8f964e76ab27368dba7ca3d Mon Sep 17 00:00:00 2001 From: Tom Naessens Date: Fri, 31 May 2019 12:45:49 +1200 Subject: [PATCH] Make sure Cancancan actually finds the resource to authorize it --- app/controllers/requests_controller.rb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/app/controllers/requests_controller.rb b/app/controllers/requests_controller.rb index cd5f04b..4976c59 100644 --- a/app/controllers/requests_controller.rb +++ b/app/controllers/requests_controller.rb @@ -2,7 +2,7 @@ class RequestsController < ApplicationController load_and_authorize_resource :user, find_by: :name before_action :load_request, only: [:confirm, :decline] - authorize_resource :request, only: [:confirm, :decline] + authorize_resource :request, id_param: :request_id, only: [:confirm, :decline] def index @requests = @user.incoming_requests.group_by(&:status)