add unauthorized error if trying to view api keys for an unowned channel

2014-06-29 16:26:00 -04:00 · 2014-06-29 16:26:00 -04:00 · 0cf413c724
commit 0cf413c724
parent 9606889aac
1 changed files with 1 additions and 0 deletions
--- a/app/controllers/api_keys_controller.rb
+++ b/app/controllers/api_keys_controller.rb
@ -5,6 +5,7 @@ class ApiKeysController < ApplicationController

  def index
    api_index params[:channel_id]
+    respond_with_error(:error_auth_required) and return if @channel.blank?
  end

  def destroy