Closed manusajith closed 11 years ago
Since user authentication is not checked for edit and update actions in profile controller, current_user cant be called. Code breaks and gives error.
def verify_user! unless @profile.email == current_user.email redirect_to root_url, :alert => "Access denied." end end
Fixed by PR.
Since user authentication is not checked for edit and update actions in profile controller, current_user cant be called. Code breaks and gives error.