From: Matt Amos Date: Fri, 7 Nov 2008 11:36:00 +0000 (+0000) Subject: D'oh! Fixed stupid errors in changeset controller. X-Git-Tag: live~7609^2~215 X-Git-Url: https://git.openstreetmap.org/rails.git/commitdiff_plain/527b6f76e3e1f1a3b7f0464f290a886786f01e2b D'oh! Fixed stupid errors in changeset controller. --- diff --git a/app/controllers/changeset_controller.rb b/app/controllers/changeset_controller.rb index 9152df816..904330900 100644 --- a/app/controllers/changeset_controller.rb +++ b/app/controllers/changeset_controller.rb @@ -69,7 +69,7 @@ class ChangesetController < ApplicationController # check user credentials - only the user who opened a changeset # may alter it. - unless @user.id == changeset.user_id + unless @user.id == cs.user_id raise OSM::APIUserChangesetMismatchError end @@ -132,13 +132,13 @@ class ChangesetController < ApplicationController return end + changeset = Changeset.find(params[:id]) + # access control - only the user who created a changeset may # upload to it. unless @user.id == changeset.user_id raise OSM::APIUserChangesetMismatchError end - - changeset = Changeset.find(params[:id]) diff_reader = DiffReader.new(request.raw_post, changeset) Changeset.transaction do