lib/cellect/server/api/sets.rb in cellect-server-1.3.2 vs lib/cellect/server/api/sets.rb in cellect-server-1.3.3

@@ -21,10 +21,13 @@
         #   subject_id: integer
         #   group_id: integer, required if grouped
         #   priority: float, required if prioritized
         put :add do
           return four_oh_four unless workflow
+          return bad_request unless valid_subject_id_update?
+          return bad_request unless valid_group_id_update?
+          return bad_request unless valid_priority_update?
           workflow.add(update_params)
           nil
         end
 
         # PUT /workflows/:workflow_id/remove
@@ -33,9 +36,11 @@
         # Accepts params
         #   subject_id: integer
         #   group_id: integer, required if grouped
         put :remove do
           return four_oh_four unless workflow
+          return bad_request unless valid_subject_id_update?
+          return bad_request unless valid_group_id_update?
           workflow.remove(update_params)
           nil
         end
       end
     end