spree_core 3.2.6 → 3.2.7

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 29390ea0bd0ed2b5069fcab5125778fa23d316cc
-  data.tar.gz: 5079c2417a09e239ee60bbd9a37861e451e8ca46
+  metadata.gz: b966f0b41c17b1b0397491803b4f3f475f472375
+  data.tar.gz: bf70f58208a09a564a5b337b3a2b84cad71e27d3
 SHA512:
-  metadata.gz: d03cbdee9e12a5497437798a6aada084762a7721793228a3bee3a6a842d84a93c8dbddcad7b9bfa1ce9ffa4c176fb0174182c7811c031eca81039c37608f695b
-  data.tar.gz: 3258f0cf50c6d9eaa892e7c41a663d2a50ea804774189a9e615bbbc2d28087d008cbfdeb37d304a130d0fdd528cf5a9a6a8c1e6336158687d1fff2df7edcd512
+  metadata.gz: acbd6dd076a001da65ed6bb6340e5670ff6169884ebb44941eebed7659dbbadea45589e568d6d7e0660a88b2272f77a50bb8543a933496772ecceda61f95bb67
+  data.tar.gz: 32694d53a8ef20c28199bc571e9a8ebd3b5a153a69b7fa4e5c87522e6aa0e1c9a59724c03e663ce0935d9a5bdda09ba945b909032358ac614f19feeaaf7a2c2f

data/app/models/spree/order.rb

@@ -604,6 +604,22 @@ module Spree
     end
     alias_method :fully_discounted, :fully_discounted?
 
+    def payments_attributes=(attributes)
+      validate_payments_attributes(attributes)
+      super(attributes)
+    end
+
+    def validate_payments_attributes(attributes)
+      # Ensure the payment methods specified are allowed for this user
+      payment_methods = Spree::PaymentMethod.where(id: available_payment_methods.map(&:id))
+      attributes.each do |payment_attributes|
+        payment_method_id = payment_attributes[:payment_method_id]
+
+        # raise RecordNotFound unless it is an allowed payment method
+        payment_methods.find(payment_method_id) if payment_method_id
+      end
+    end
+
     private
 
     def link_by_email

data/lib/spree/core/version.rb

@@ -1,5 +1,5 @@
 module Spree
   def self.version
-    "3.2.6"
+    "3.2.7"
   end
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: spree_core
 version: !ruby/object:Gem::Version
-  version: 3.2.6
+  version: 3.2.7
 platform: ruby
 authors:
 - Sean Schofield
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2017-12-08 00:00:00.000000000 Z
+date: 2017-12-12 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activemerchant