prevent update of any object without providing the correct/current
[rails.git] / app / controllers / relation_controller.rb
index 20f5372a6cc1ed0e40d64c37ece71f6a1b7bc738..d7b9de13cb6589cad3589e68396648ca7193b001 100644 (file)
@@ -49,6 +49,10 @@ class RelationController < ApplicationController
     begin
       relation = Relation.find(params[:id])
       new_relation = Relation.from_xml(request.raw_post)
+      if new_relation.version != relation.version
+        render :text => "Version mismatch: Provided " + new_relation.version.to_s + ", server had: " + relation.version.to_s, :status => :bad_request
+        return
+      end  
 
       if new_relation and new_relation.id == relation.id
        relation.update_from new_relation, user