Add admin authentication

cancelei · Dec 15, 2023 · 65b79ed · 65b79ed
1 parent b2e2e1c
commit 65b79ed
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/app/controllers/api/games_controller.rb b/app/controllers/api/games_controller.rb
@@ -13,16 +13,17 @@ def show
 
     def create
       @game = Game.new(game_params)
+      user = User.find(params[:user_id])
 
-      if current_user.is_admin && @game.save
+      if user.is_admin && @game.save
         render json: @game, status: :created
       else
         render json: @game.errors, status: :unprocessable_entity
       end
     end
 
     def destroy
-      if current_user.is_admin && @game.destroy
+      if @game.destroy
         head :no_content
       else
         render json: @game.errors, status: :unprocessable_entity