diff --git a/app/controllers/application_controller.rb b/app/controllers/application_controller.rb index fa8fc24..803d135 100644 --- a/app/controllers/application_controller.rb +++ b/app/controllers/application_controller.rb @@ -13,7 +13,7 @@ class ApplicationController < ActionController::API private - def require_owner! owner + def require_owner!(owner) render_forbidden_error if owner != current_user end