DGNum/demarches-normaliennes
13
1
Fork 0
Code Issues 1 Pull requests Projects Releases Packages Wiki Activity

protect page with check the owner's dossier

Browse source
This commit is contained in:
Xavier J 2015-10-09 17:33:33 +02:00
parent 0bd43e538a
commit c6ed98b978
11 changed files with 98 additions and 16 deletions
Download patch file Download diff file Expand all files Collapse all files

4
app/controllers/users/dossiers_controller.rb
View file

@ -5,7 +5,7 @@ class Users::DossiersController < UsersController
end
def show
@dossier = Dossier.find(params[:id])
@dossier = current_user_dossier params[:id]
@etablissement = @dossier.etablissement
@entreprise = @dossier.entreprise.decorate
@ -43,7 +43,7 @@ class Users::DossiersController < UsersController
def update
@dossier = Dossier.find(params[:id])
@dossier = current_user_dossier params[:id]
if checked_autorisation_donnees?
@dossier.update_attributes(update_params)