From a8b202c9bc6be472ad1c1e567d05f1d3960d98ef Mon Sep 17 00:00:00 2001 From: Jean-Philippe Lang Date: Mon, 13 Aug 2007 10:28:55 +0000 Subject: [PATCH] Fixed: non-active users can be viewed with account/show git-svn-id: http://redmine.rubyforge.org/svn/trunk@622 e93f8b46-1217-0410-a6f0-8f06a7374b81 --- app/controllers/account_controller.rb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/app/controllers/account_controller.rb b/app/controllers/account_controller.rb index 0b70972f..8ee046a0 100644 --- a/app/controllers/account_controller.rb +++ b/app/controllers/account_controller.rb @@ -26,7 +26,7 @@ class AccountController < ApplicationController # Show user's account def show - @user = User.find(params[:id]) + @user = User.find_active(params[:id]) @custom_values = @user.custom_values.find(:all, :include => :custom_field) # show only public projects and private projects that the logged in user is also a member of