From d480a106615277e1ce94bbeaab99927118bf0328 Mon Sep 17 00:00:00 2001
From: "Matthew K. Fu JuYuan" <matthewfu@gmail.com>
Date: Wed, 19 Sep 2012 11:12:22 +0800
Subject: [PATCH] fix for object_auth update

---
 app/controllers/admin/object_auths_new_interface_controller.rb | 2 +-
 app/views/admin/object_auths_new_interface/setting.html.erb    | 3 ++-
 2 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/app/controllers/admin/object_auths_new_interface_controller.rb b/app/controllers/admin/object_auths_new_interface_controller.rb
index 3391fbc2..589dc635 100644
--- a/app/controllers/admin/object_auths_new_interface_controller.rb
+++ b/app/controllers/admin/object_auths_new_interface_controller.rb
@@ -67,13 +67,13 @@ class Admin::ObjectAuthsNewInterfaceController < OrbitBackendController
   end
 
   def check_permission(var)
-    # binding.pry
     #app = ModuleApp.first({conditions:{key: params[:module_app_key]}})
     # setup_vars
     @module_app.is_manager?(current_user) || current_user.admin?
   end
 
   def setup_vars
+    # binding.pry
     if request.env['HTTP_REFERER'].split('/')[4]  == "object_auths"
       @app_key = params[:app_key]
     else
diff --git a/app/views/admin/object_auths_new_interface/setting.html.erb b/app/views/admin/object_auths_new_interface/setting.html.erb
index d3853c25..8fb70bce 100644
--- a/app/views/admin/object_auths_new_interface/setting.html.erb
+++ b/app/views/admin/object_auths_new_interface/setting.html.erb
@@ -26,9 +26,10 @@
 <%#= label_tag :role, t("admin.roles") %>
 <div class="clear">
 <%= content_tag :div do -%>
-	<% form_tag admin_object_auth_ob_auth_path  do %>
+	<% form_tag admin_object_auth_ob_auth_url  do %>
               <%= render :partial =>  "layouts/users_checkbox_ary"  %>
               <div class="form-actions form-fixed pagination-right">
+      <%= hidden_field_tag 'app_key', @module_app.key %>
 	<%= submit_tag "Update", :class => 'btn btn-primary' %>
 	</div>
 	<% end -%>