diff --git a/app/controllers/cards/comments/reactions_controller.rb b/app/controllers/cards/comments/reactions_controller.rb index 5d58145039..c65d34291f 100644 --- a/app/controllers/cards/comments/reactions_controller.rb +++ b/app/controllers/cards/comments/reactions_controller.rb @@ -2,6 +2,8 @@ class Cards::Comments::ReactionsController < ApplicationController include CardScoped before_action :set_comment + before_action :set_reaction, only: %i[ destroy ] + before_action :ensure_permision_to_administer_reaction, only: %i[ destroy ] def index end @@ -14,17 +16,19 @@ def create end def destroy - @reaction = @comment.reactions.find(params[:id]) - - if Current.user != @reaction.reacter - head :forbidden - else - @reaction.destroy - end + @reaction.destroy end private def set_comment @comment = @card.comments.find(params[:comment_id]) end + + def set_reaction + @reaction = @comment.reactions.find(params[:id]) + end + + def ensure_permision_to_administer_reaction + head :forbidden if Current.user != @reaction.reacter + end end