Merge pull request #626 from DonovanDMC/post-set-maintainers-access-check

[PostSets] Add view access check to /post_sets/:id/maintainers
2024-04-03 14:54:25 +02:00 · 2024-04-03 14:54:25 +02:00 · e530847cf8
commit e530847cf8
parent d5c371dccf 79e729e4f7
1 changed files with 1 additions and 0 deletions
--- a/app/controllers/post_sets_controller.rb
+++ b/app/controllers/post_sets_controller.rb
@ -68,6 +68,7 @@ class PostSetsController < ApplicationController

  def maintainers
    @post_set = PostSet.find(params[:id])
+    check_view_access(@post_set)
  end

  def post_list