Tran Hoang Viet · @vietth · Truong Ba Dieu · Tran Hoang Viet · Truong Ba Dieu · Tran Hoang Viet
--- a/app/controllers/orders_controller.rb
+++ b/app/controllers/orders_controller.rb
 class OrdersController < ApplicationController
  before_action :authenticate_user!
+  before_action :set_order, only: [:show, :update]
+  before_action -> { authorize(@order) }, only: [:show, :update]
--- a/app/controllers/products_controller.rb
+++ b/app/controllers/products_controller.rb
    end
  end
  
-  def search
-    query = params[:query].present? ? {title: params[:query]} : '*'
-    @products = Product.search(query, page: params[:page])
-    add_breadcrumb('Search result')
-  end
-
  def meta_attributes
    return if @product.blank?
  
    @meta_attributes ||= {