From c6f1e3cc4a927a5f0bd6aabace0610125d6a4b8a Mon Sep 17 00:00:00 2001
From: Connor Turland <connorturland@gmail.com>
Date: Thu, 24 Mar 2016 23:29:08 -0700
Subject: [PATCH] breaking the mapping_policy

---
 app/controllers/api/restful_controller.rb | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/app/controllers/api/restful_controller.rb b/app/controllers/api/restful_controller.rb
index 77edd69f..8ecad963 100644
--- a/app/controllers/api/restful_controller.rb
+++ b/app/controllers/api/restful_controller.rb
@@ -7,9 +7,9 @@ class API::RestfulController < ActionController::Base
   load_and_authorize_resource only: [:show, :update, :destroy]
 
   def create
-    authorize resource_class
     instantiate_resource
     resource.user = current_user
+    authorize resource_class
     create_action
     respond_with_resource
   end