Merge pull request #52 from ZeusWPI/fix/51/users-can-approve-their-ow…

…n-requests Make sure Cancancan actually finds the resource to authorize it
ZeusWPI · May 31, 2019 · 923c1ab · 923c1ab
2 parents 13bf57d + 756cd09
commit 923c1ab
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/app/controllers/requests_controller.rb b/app/controllers/requests_controller.rb
@@ -2,7 +2,7 @@ class RequestsController < ApplicationController
   load_and_authorize_resource :user, find_by: :name
 
   before_action :load_request, only: [:confirm, :decline]
-  authorize_resource :request, only: [:confirm, :decline]
+  authorize_resource :request, id_param: :request_id, only: [:confirm, :decline]
 
   def index
     @requests = @user.incoming_requests.group_by(&:status)