This commit is contained in:
Andrew Brown 2021-08-03 01:00:11 -07:00
parent 5b29f1bdcc
commit 258be6f917

View File

@ -27,7 +27,7 @@ class ApplicationController < ActionController::Base
session.delete(:universe_id)
elsif params[:universe].is_a?(String) && params[:universe].to_i.to_s == params[:universe]
found_universe = Universe.find_by(id: params[:universe])
found_universe = nil unless current_user.universes.include?(found_universe) || current_user.contributable_universes.include?(found_universe)
found_universe = nil unless found_universe.user_id == current_user.id || current_user.contributable_universes.include?(found_universe)
session[:universe_id] = found_universe.id if found_universe
end
end