User can only sign out their own session

2026-05-19 14:26:14 -04:00 · 2017-02-13 20:08:31 +13:00
parent d11e6f484a
commit e6b23262da
1 changed files with 1 additions and 1 deletions
--- a/app/controllers/authentications_controller.rb
+++ b/app/controllers/authentications_controller.rb
@@ -29,7 +29,7 @@ class AuthenticationsController < ApplicationController

  # DELETE /authentications/1
  def destroy
-    @authentication = Authentication.find(params[:id])
+    @authentication = Authentication.find_by(id: params[:id], member: current_member)
    @authentication.destroy

    respond_to do |format|