We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent f185b5b commit 267aaa7Copy full SHA for 267aaa7
app/controllers/users_controller.rb
@@ -74,11 +74,11 @@ def user_params
74
# Confirms the correct user.
75
def correct_user
76
@user = User.find(params[:id])
77
- redirect_to(root_url) unless @user == current_user
+ redirect_to(root_url, status: :see_other) unless current_user?(@user)
78
end
79
80
# Confirms an admin user.
81
def admin_user
82
- redirect_to(root_url) unless current_user.admin?
+ redirect_to(root_url, status: :see_other) unless current_user.admin?
83
84
0 commit comments