Correctly authorize comment deletion

2016-04-27 17:16:23 +02:00
parent 57b773698b
commit 8ef615ffaa
2 changed files with 3 additions and 10 deletions
--- a/app/policies/comment_policy.rb
+++ b/app/policies/comment_policy.rb
@@ -1,12 +1,6 @@
 class CommentPolicy < ApplicationPolicy
  def author?
-    if @record.is_a?(ActiveRecord::Relation)
-      flag = true
-      @record.all {|item| flag = (flag and item.author == @user)}
-      flag
-    else
-      @user == @record.author
-    end
+    @user == @record.author
  end
  private :author?