From 015260ff1369401948241312e946bc85a64db8fa Mon Sep 17 00:00:00 2001 From: Mathieu Magnin Date: Tue, 18 Jul 2017 18:36:36 +0200 Subject: [PATCH] Gestionnaire can download export only for his procedures --- app/controllers/backoffice/dossiers_controller.rb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/app/controllers/backoffice/dossiers_controller.rb b/app/controllers/backoffice/dossiers_controller.rb index 61d3fdc16..1cced017a 100644 --- a/app/controllers/backoffice/dossiers_controller.rb +++ b/app/controllers/backoffice/dossiers_controller.rb @@ -51,7 +51,7 @@ class Backoffice::DossiersController < Backoffice::DossiersListController end def download_dossiers_tps - procedure = Procedure.find_by(id: params[:procedure_id]) + procedure = current_gestionnaire.procedures.find_by(id: params[:procedure_id]) export = procedure.generate_export respond_to do |format|