only write to your own profile

This commit is contained in:
Raphael 2010-09-17 10:46:14 -07:00
parent 511a4487de
commit be26794e4a

View file

@ -23,7 +23,7 @@ class UsersController < ApplicationController
end end
def update def update
@user = User.find_by_id params[:id] @user = current_user
prep_image_url(params[:user]) prep_image_url(params[:user])
@user.update_profile params[:user] @user.update_profile params[:user]