diff --git a/app/controllers/packages_controller.rb b/app/controllers/packages_controller.rb index 3a3d248..a77a3e0 100644 --- a/app/controllers/packages_controller.rb +++ b/app/controllers/packages_controller.rb @@ -167,10 +167,14 @@ class PackagesController < ApplicationController end def approve_screenshot - @screenshot = Screenshot.find(params[:id]) - @screenshot.approve! - flash['notice'] = "Screenshot approved." - redirect_back(fallback_location: package_path(name: @screenshot.package.name)) + if current_user && current_user.is_admin? + @screenshot = Screenshot.find(params[:id]) + @screenshot.approve! + flash['notice'] = "Screenshot approved." + redirect_back(fallback_location: package_path(name: @screenshot.package.name)) + else + head :forbidden + end end # Returns a 160x120 thumbnail image if posssible.