From 9d9a5d07d8e28eddc2cb85b08dd97457c6ee2f6d Mon Sep 17 00:00:00 2001 From: Oleksii Kriuchykhin Date: Thu, 13 Sep 2018 11:08:58 +0200 Subject: [PATCH] Fix CREATE inventory endpoint [SCI-2693] --- app/controllers/api/v1/inventories_controller.rb | 9 +++++++-- 1 file changed, 7 insertions(+), 2 deletions(-) diff --git a/app/controllers/api/v1/inventories_controller.rb b/app/controllers/api/v1/inventories_controller.rb index 61e842bf5..70fef6fea 100644 --- a/app/controllers/api/v1/inventories_controller.rb +++ b/app/controllers/api/v1/inventories_controller.rb @@ -5,7 +5,7 @@ module Api class InventoriesController < BaseController before_action :load_team before_action :load_inventory, only: %i(show update destroy) - before_action :check_manage_permissions, only: %i(create update destroy) + before_action :check_manage_permissions, only: %i(update destroy) def index inventories = @team.repositories @@ -15,7 +15,12 @@ module Api end def create - inventory = @team.repositories.create!(inventory_params) + unless can_create_repositories?(@team) + return render body: nil, status: :forbidden + end + inventory = @team.repositories.create!( + inventory_params.merge(created_by: current_user) + ) render jsonapi: inventory, serializer: InventorySerializer, status: :created