breaking the mapping_policy

2016-03-24 23:29:08 -07:00 · 2016-03-24 23:29:08 -07:00 · c6f1e3cc4a
commit c6f1e3cc4a
parent fc1dc591f3
1 changed files with 1 additions and 1 deletions
--- a/app/controllers/api/restful_controller.rb
+++ b/app/controllers/api/restful_controller.rb
@ -7,9 +7,9 @@ class API::RestfulController < ActionController::Base
  load_and_authorize_resource only: [:show, :update, :destroy]

  def create
-    authorize resource_class
    instantiate_resource
    resource.user = current_user
+    authorize resource_class
    create_action
    respond_with_resource
  end