add authentication validation in edit products

anamariasosam · Jul 21, 2016 · c6a75ee · c6a75ee
1 parent 895c544
commit c6a75ee
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/app/controllers/products_controller.rb b/app/controllers/products_controller.rb
@@ -36,6 +36,10 @@ def new
 
   # GET /products/1/edit
   def edit
+    if current_user.id != @product.store_id
+      flash[:error] = "No tienes permisos para editar este producto"
+      redirect_to root_url
+    end
   end
 
   # POST /products