Restrict search to front-end payment methods

We don't want users to be using backend-only or otherwise unavailable payment methods when creating transactions.
solidusio · Sep 12, 2016 · 80246fc · 80246fc
1 parent 2e8ce21
commit 80246fc
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/app/controllers/solidus_paypal_braintree/transactions_controller.rb b/app/controllers/solidus_paypal_braintree/transactions_controller.rb
@@ -36,6 +36,8 @@ def transaction_params
   end
 
   def payment_method
-    SolidusPaypalBraintree::Gateway.find(params[:payment_method_id])
+    SolidusPaypalBraintree::Gateway.
+      available(:front_end).
+      find { |g| g.id == params[:payment_method_id] }
   end
 end