app/controllers/spree/api/payments_controller.rb in solidus_api-2.10.5 vs app/controllers/spree/api/payments_controller.rb in solidus_api-2.11.0
- old
+ new
@@ -60,10 +60,10 @@
private
def find_order
@order = Spree::Order.find_by(number: order_id)
- authorize! :read, @order, order_token
+ authorize! :show, @order, order_token
end
def find_payment
@payment = @order.payments.find(params[:id])
end