strong params for reopen

etalab · Jan 21, 2025 · c852415 · c852415
1 parent e7a6c20
commit c852415
Showing 1 changed file with 6 additions and 2 deletions.
diff --git a/app/controllers/reopen_authorizations_controller.rb b/app/controllers/reopen_authorizations_controller.rb
@@ -33,11 +33,15 @@ def summary_path
   end
 
   def extract_authorization
-    authorization_request = AuthorizationRequest.find(params[:authorization_request_id])
-    @authorization = authorization_request.authorizations.friendly.find(params[:authorization_id])
+    authorization_request = AuthorizationRequest.find(reopen_authorization_params[:authorization_request_id])
+    @authorization = authorization_request.authorizations.friendly.find(reopen_authorization_params[:authorization_id])
   end
 
   def authorize_authorization_reopening
     authorize @authorization, :reopen?
   end
+
+  def reopen_authorization_params
+    params.permit(:authorization_request_id, :authorization_id, :authorization_request_class)
+  end
 end