Prevent member from checking other member station

Ygnas · May 27, 2022 · 01c0f73 · 01c0f73
1 parent 8655600
commit 01c0f73
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/app/controllers/StationCtrl.java b/app/controllers/StationCtrl.java
@@ -13,6 +13,7 @@ public class StationCtrl extends Controller {
   public static void index(Long id) {
     Member member = Accounts.getLoggedInMember();
     Station station = Station.findById(id);
+    if (!member.stations.contains(station)) redirect("/dashboard");
     Logger.info("Station id = " + id);
     render("station.html", station);
   }