Allow people with edit privileges not to have to enter the password

vigetlabs · May 7, 2020 · 33bd669 · 33bd669
1 parent de08654
commit 33bd669
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/app/controllers/adventures_controller.rb b/app/controllers/adventures_controller.rb
@@ -123,7 +123,7 @@ def adventure_params
   end
 
   def check_authentication
-    if @adventure.has_password? && !session[@adventure.title]
+    if !@adventure.editable_by?(current_user) && (@adventure.has_password? && !session[@adventure.title])
       render :authenticate_player
     end
   end