From 527b6f76e3e1f1a3b7f0464f290a886786f01e2b Mon Sep 17 00:00:00 2001 From: Matt Amos Date: Fri, 7 Nov 2008 11:36:00 +0000 Subject: [PATCH 1/1] D'oh! Fixed stupid errors in changeset controller. --- app/controllers/changeset_controller.rb | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/app/controllers/changeset_controller.rb b/app/controllers/changeset_controller.rb index 9152df816..904330900 100644 --- a/app/controllers/changeset_controller.rb +++ b/app/controllers/changeset_controller.rb @@ -69,7 +69,7 @@ class ChangesetController < ApplicationController # check user credentials - only the user who opened a changeset # may alter it. - unless @user.id == changeset.user_id + unless @user.id == cs.user_id raise OSM::APIUserChangesetMismatchError end @@ -132,13 +132,13 @@ class ChangesetController < ApplicationController return end + changeset = Changeset.find(params[:id]) + # access control - only the user who created a changeset may # upload to it. unless @user.id == changeset.user_id raise OSM::APIUserChangesetMismatchError end - - changeset = Changeset.find(params[:id]) diff_reader = DiffReader.new(request.raw_post, changeset) Changeset.transaction do -- 2.43.2