Access control has already been done through the card
This commit is contained in:
@@ -11,6 +11,6 @@ module CardScoped
|
||||
end
|
||||
|
||||
def set_collection
|
||||
@collection = Current.user.collections.find(@card.collection_id)
|
||||
@collection = @card.collection
|
||||
end
|
||||
end
|
||||
|
||||
Reference in New Issue
Block a user