Only show serendipitous cards if a user is signed in and owns the con…

…tent they're looking at
indentlabs · Sep 25, 2016 · 10aa258 · 10aa258
1 parent 8e75458
commit 10aa258
Showing 1 changed file with 7 additions and 5 deletions.
diff --git a/app/controllers/content_controller.rb b/app/controllers/content_controller.rb
@@ -30,11 +30,13 @@ def show
     # TODO: Secure this with content class whitelist lel
     @content = content_type_from_controller(self.class).find(params[:id])
 
-    # question = QuestionService.question(Content.new @content.slice(*content_param_list.flat_map { |v| v.is_a?(Symbol) ? v : v.keys.map { |k| k.to_s.chomp('_attributes').to_sym } }))
-    begin
-      questionable_params = content_param_list.reject { |x| x.is_a?(Hash) || x.to_s.end_with?('_id') }
-      @question = QuestionService.question(Content.new @content.slice(*questionable_params))
-    rescue
+    if current_user and current_user == @content.user
+      # question = QuestionService.question(Content.new @content.slice(*content_param_list.flat_map { |v| v.is_a?(Symbol) ? v : v.keys.map { |k| k.to_s.chomp('_attributes').to_sym } }))
+      begin
+        questionable_params = content_param_list.reject { |x| x.is_a?(Hash) || x.to_s.end_with?('_id') }
+        @question = QuestionService.question(Content.new @content.slice(*questionable_params))
+      rescue
+      end
     end
 
     respond_to do |format|