- unless @valid_params
- redirect_to :action => "edit"
- return
- end
-
- if @user_block.creator_id != @user.id
- flash[:notice] = t('user_block.update.only_creator_can_edit')
- redirect_to :action => "edit"
- return
- end
-
- if @user_block.update_attributes({ :ends_at => Time.now.getutc() + @block_period.hours,
- :reason => params[:user_block][:reason],
- :needs_view => params[:user_block][:needs_view] })
- flash[:notice] = t('user_block.update.success')
- redirect_to(@user_block)
+ if @valid_params
+ if @user_block.creator_id != @user.id
+ flash[:error] = t('user_block.update.only_creator_can_edit')
+ redirect_to :action => "edit"
+ elsif @user_block.update_attributes({
+ :ends_at => Time.now.getutc() + @block_period.hours,
+ :reason => params[:user_block][:reason],
+ :needs_view => params[:user_block][:needs_view]
+ }, :without_protection => true)
+ flash[:notice] = t('user_block.update.success')
+ redirect_to(@user_block)
+ else
+ render :action => "edit"
+ end