app/controllers/spree/api/v1/promotions_controller.rb in spree_api-3.6.6 vs app/controllers/spree/api/v1/promotions_controller.rb in spree_api-3.7.0.rc1
- old
+ new
@@ -15,9 +15,10 @@
private
def requires_admin
return if @current_user_roles.include?('admin')
+
unauthorized and return
end
def load_promotion
@promotion = Spree::Promotion.find_by(id: params[:id]) || Spree::Promotion.with_coupon_code(params[:id])