spree_core 3.1.11 → 3.1.12

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 270e63acb2ee4007b6bea2044c6d983e308c0e9e
-  data.tar.gz: 6d048ddd8484553b669a1e38ecae1c82a323add5
+  metadata.gz: db3ebbca771b182322334dbc1ac1fcf3b7c7b18d
+  data.tar.gz: 27576641885f1676dc1e22aba3d720cff12efa41
 SHA512:
-  metadata.gz: b8da7ac191edc6933febe5cd2006d8ea31a96d3fc1be13a7043644b0ba7afcd17c33399847a277d88a6eea4d75ad0c94ef83029fdf2ddfaf563a6751f1d008fe
-  data.tar.gz: defab635ca53f329c9539dd6b36835e24b9e9e88080f5cc006818f93f8b4bbcfdd928f996baf28b0508140104f255c7466cdf56568c0d07bedf8353701a6a973
+  metadata.gz: c4bb4bd04f186f04ac802ae24e9e22581e4b487335d73fa82474174b6f8555cff8b5ccd5c687e7b4ddc25982119c4fc67787f0332ced653c6e75f5d77538f78e
+  data.tar.gz: 8a7abab01b4753d4e32d0524414948754890b9a2fbb8d96d0dbe3bdd63857e6d3066c13cf2c5ae4e05feb1f2a4e4cbd486a94d82354cf684ccee9905f238a26d

data/app/models/spree/order.rb

@@ -608,6 +608,22 @@ module Spree
     end
     alias_method :fully_discounted, :fully_discounted?
 
+    def payments_attributes=(attributes)
+      validate_payments_attributes(attributes)
+      super(attributes)
+    end
+
+    def validate_payments_attributes(attributes)
+      # Ensure the payment methods specified are allowed for this user
+      payment_methods = Spree::PaymentMethod.where(id: available_payment_methods.map(&:id))
+      attributes.each do |payment_attributes|
+        payment_method_id = payment_attributes[:payment_method_id]
+
+        # raise RecordNotFound unless it is an allowed payment method
+        payment_methods.find(payment_method_id) if payment_method_id
+      end
+    end
+
     private
 
     def link_by_email

data/lib/spree/core/version.rb

@@ -1,5 +1,5 @@
 module Spree
   def self.version
-    "3.1.11"
+    "3.1.12"
   end
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: spree_core
 version: !ruby/object:Gem::Version
-  version: 3.1.11
+  version: 3.1.12
 platform: ruby
 authors:
 - Sean Schofield
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2017-12-08 00:00:00.000000000 Z
+date: 2017-12-12 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activemerchant