Prevents request of all users

11 years ago · c4bb6bb330
parent 99125647f6
commit c4bb6bb330
1 changed files with 2 additions and 1 deletions
--- a/app/controllers/api/v2/users_controller.rb
+++ b/app/controllers/api/v2/users_controller.rb
@ -7,7 +7,8 @@ module Api
      skip_filter :require_admin, :only => :index

      def index
-        @users = UserSearchService.new(params).search
+        @users = []
+        @users = UserSearchService.new(params).search if params[:ids] and not params[:ids].empty?

        respond_to do |format|
          format.api