Check api_user, not api_user.user, for admin flag

zooniverse · Oct 17, 2023 · 05cbc91 · 05cbc91
1 parent 377fc00
commit 05cbc91
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/app/controllers/api/v1/project_preferences_controller.rb b/app/controllers/api/v1/project_preferences_controller.rb
@@ -26,7 +26,7 @@ def find_upp_for_update_settings
   end
 
   def user_allowed?
-    @upp.project.owners_and_collaborators.include?(api_user.user) || api_user.user.is_admin?
+    @upp.project.owners_and_collaborators.include?(api_user.user) || api_user.is_admin?
   end
 
   def update_settings_response