app/controllers/effective/regions_controller.rb in effective_regions-1.6.1 vs app/controllers/effective/regions_controller.rb in effective_regions-1.6.2

@@ -69,9 +69,11 @@
 
       render :text => 'error', :status => :unprocessable_entity
     end
 
     def snippet # This is a GET.  CKEDITOR passes us data, we need to render the non-editable content
+      EffectiveRegions.authorized?(self, :edit, Effective::Region.new())
+
       klass = "Effective::Snippets::#{region_params[:name].try(:classify)}".safe_constantize
 
       if klass.present?
         @snippet = klass.new(region_params[:data])
         render :partial => @snippet.to_partial_path, :object => @snippet, :locals => {:snippet => @snippet, :snippet_preview => true}