Add a permissions check to determine if the active user has edit permission on the item in order to display the tag add form

1 files changed, 0 insertions, 2 deletions

diff --git a/modules/tag/controllers/tags.php b/modules/tag/controllers/tags.php
index 304d9bd0..7b16f751 100644
--- a/modules/tag/controllers/tags.php
+++ b/modules/tag/controllers/tags.php
@@ -51,7 +51,6 @@ class Tags_Controller extends REST_Controller {
   }
 
   public function _create($tag) {
-    // @todo: check permissions
     $form = tag::get_add_form($this->input->post('item_id'));
     if ($form->validate()) {
       $item = ORM::factory("item", $this->input->post("item_id"));
@@ -63,7 +62,6 @@ class Tags_Controller extends REST_Controller {
       rest::http_location(url::site("tags/{$tag->id}"));
     }
 
-    // @todo Return appropriate HTTP status code indicating error.
     print $form;
   }