prevent update of any object without providing the correct/current

[rails.git] / app / controllers / relation_controller.rb

diff --git a/app/controllers/relation_controller.rb b/app/controllers/relation_controller.rb
index 20f5372a6cc1ed0e40d64c37ece71f6a1b7bc738..d7b9de13cb6589cad3589e68396648ca7193b001 100644 (file)
--- a/app/controllers/relation_controller.rb
+++ b/app/controllers/relation_controller.rb
@@ -49,6 +49,10 @@ class RelationController < ApplicationController
     begin
       relation = Relation.find(params[:id])
       new_relation = Relation.from_xml(request.raw_post)
     begin
       relation = Relation.find(params[:id])
       new_relation = Relation.from_xml(request.raw_post)

+      if new_relation.version != relation.version
+        render :text => "Version mismatch: Provided " + new_relation.version.to_s + ", server had: " + relation.version.to_s, :status => :bad_request
+        return
+      end  

 
       if new_relation and new_relation.id == relation.id
        relation.update_from new_relation, user
 
       if new_relation and new_relation.id == relation.id
        relation.update_from new_relation, user