Do not allow foreign domain renew #2629

This commit is contained in:
Martin Lensment 2015-06-03 15:14:52 +03:00
parent c1b5fc8265
commit 1db3486e65
3 changed files with 17 additions and 2 deletions

View file

@ -77,7 +77,7 @@ class Epp::DomainsController < EppController
end
def renew
authorize! :renew, Epp::Domain
authorize! :renew, @domain
handle_errors(@domain) and return unless @domain.renew(
params[:parsed_frame].css('curExpDate').text,