Make sure action for toggling theme isn't available unless the user h…

…as permission
openaustralia · Sep 13, 2023 · ef288c6 · ef288c6
1 parent 9abe164
commit ef288c6
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/app/controllers/themes_controller.rb b/app/controllers/themes_controller.rb
@@ -6,6 +6,8 @@ class ThemesController < ApplicationController
 
   sig { void }
   def toggle
+    return unless Flipper.enabled?(:switch_themes, current_user)
+
     update_tailwind_theme(!show_tailwind_theme?)
     redirect_back(fallback_location: root_path)
   end