base/app/controllers/permissions_controller.rb in social_stream-2.0.4 vs base/app/controllers/permissions_controller.rb in social_stream-2.1.0

@@ -13,8 +13,10 @@
   end
 
   private
 
   def relation!
-    @relation = current_subject.relations.find(params[:relation_id])
+    @relation = Relation.find(params[:relation_id])
+
+    authorize! :read, @relation
   end
 end