client: owner should be fetched from original client when updating

ory · Sep 23, 2016 · 06077e9 · 06077e9
1 parent a922002
commit 06077e9
Showing 1 changed file with 7 additions and 1 deletion.
diff --git a/client/handler.go b/client/handler.go
@@ -87,11 +87,17 @@ func (h *Handler) Update(w http.ResponseWriter, r *http.Request, ps httprouter.P
 		return
 	}
 
+	o, err := h.Manager.GetConcreteClient(ps.ByName("id"))
+	if err != nil {
+		h.H.WriteError(ctx, w, r, err)
+		return
+	}
+
 	if _, err := h.W.TokenAllowed(ctx, h.W.TokenFromRequest(r), &ladon.Request{
 		Resource: ClientsResource,
 		Action:   "update",
 		Context: ladon.Context{
-			"owner": c.Owner,
+			"owner": o.Owner,
 		},
 	}, Scope); err != nil {
 		h.H.WriteError(ctx, w, r, err)