From 366fe061134720f84f8ceb482df84eaba5e6e62c Mon Sep 17 00:00:00 2001 From: David Heinemeier Hansson Date: Sun, 13 Apr 2025 20:22:53 +0200 Subject: [PATCH] Access control has already been done through the card --- app/controllers/concerns/card_scoped.rb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/app/controllers/concerns/card_scoped.rb b/app/controllers/concerns/card_scoped.rb index e85291b57..ef40d56e3 100644 --- a/app/controllers/concerns/card_scoped.rb +++ b/app/controllers/concerns/card_scoped.rb @@ -11,6 +11,6 @@ module CardScoped end def set_collection - @collection = Current.user.collections.find(@card.collection_id) + @collection = @card.collection end end