Fix comment policy

2016-04-26 17:42:53 +02:00
parent 4b5cd5a22a
commit 57b773698b
3 changed files with 9 additions and 3 deletions
--- a/app/controllers/comments_controller.rb
+++ b/app/controllers/comments_controller.rb
@ -112,13 +112,13 @@ class CommentsController < ApplicationController

  def destroy
    @comments = Comment.where(file_id: params[:file_id], row: params[:row])
+    authorize!
    @comments.delete_all
    respond_to do |format|
      #format.html { redirect_to comments_url, notice: 'Comments were successfully destroyed.' }
      format.html { head :no_content, notice: 'Comments were successfully destroyed.' }
      format.json { head :no_content }
    end
-    authorize!
  end

  private