Note the security oddity of finding straight off root

2025-04-05 15:56:12 +02:00
parent 851be126ab
commit 3b5f8c2e6a
1 changed files with 1 additions and 0 deletions
@@ -7,6 +7,7 @@ module BubbleScoped

  private
    def set_bubble
+      # Finding the bubble on the root depends on checking permission by finding its bucket via Current.user
      @bubble = Bubble.find(params[:bubble_id])
    end