summaryrefslogtreecommitdiff
path: root/billing/app/controllers/payments_controller.rb
diff options
context:
space:
mode:
authorjessib <jessib@riseup.net>2013-08-22 12:21:43 -0700
committerjessib <jessib@riseup.net>2013-08-22 12:21:43 -0700
commit03a643458733550a9bfb5e661e5a74b1964f021c (patch)
treeae13caf971cf13ee9d9109f4f5ac8b98ec8d639a /billing/app/controllers/payments_controller.rb
parentd948614d3e2bc190b9c819e961b94c03d7a24fcd (diff)
Some more billing cleanup.
Diffstat (limited to 'billing/app/controllers/payments_controller.rb')
-rw-r--r--billing/app/controllers/payments_controller.rb2
1 files changed, 1 insertions, 1 deletions
diff --git a/billing/app/controllers/payments_controller.rb b/billing/app/controllers/payments_controller.rb
index 226f5a0..17ac0f3 100644
--- a/billing/app/controllers/payments_controller.rb
+++ b/billing/app/controllers/payments_controller.rb
@@ -16,10 +16,10 @@ class PaymentsController < BillingBaseController
end
def index
+ access_denied unless admin? or (@user == current_user)
customer = Customer.find_by_user_id(@user.id)
braintree_data = Braintree::Customer.find(customer.braintree_customer_id)
# these will be ordered by created_at descending, per http://stackoverflow.com/questions/16425475/
- # TODO permissions
@transactions = braintree_data.transactions
end