* fix validation

This commit is contained in:
Seth Call 2016-02-08 20:47:01 -06:00
parent 01aae26e80
commit d7ddff9bb7
1 changed files with 3 additions and 7 deletions

View File

@ -42,13 +42,9 @@ class ApiTeachersController < ApiController
private
def auth_teacher
if current_user.admin
@teacher = Teacher.find(params[:id])
else
@teacher = Teacher.where("user_id=? AND id=?", current_user.id, params[:id]).first
end
unless @teacher
@teacher = Teacher.find(params[:id])
if !current_user.admin && !@teacher.user == current_user
Rails.logger.info("Could not find teacher #{params[:id]} for #{current_user}")
raise JamPermissionError, ValidationMessages::PERMISSION_VALIDATION_ERROR
end