diff --git a/app/controllers/article_homepages_controller.rb b/app/controllers/article_homepages_controller.rb index ce5b8a29c..2ee45ba28 100644 --- a/app/controllers/article_homepages_controller.rb +++ b/app/controllers/article_homepages_controller.rb @@ -32,6 +32,13 @@ class ArticleHomepagesController < ApplicationController end def update + if User.current.admin? || User.current.id == @article.user_id + respond_to do |format| + format.html { render :layout => 'static_base' } + end + else + render_403 + end if User.current.logged? @article.title = params[:article_homepage][:title] @article.content = params[:article_homepage][:content]