2 files changed, 18 insertions, 11 deletions
diff --git a/ufund-api/src/main/java/com/ufund/api/ufundapi/service/CupboardService.java b/ufund-api/src/main/java/com/ufund/api/ufundapi/service/CupboardService.java
index 15f8442..c8609ab 100644
--- a/ufund-api/src/main/java/com/ufund/api/ufundapi/service/CupboardService.java
+++ b/ufund-api/src/main/java/com/ufund/api/ufundapi/service/CupboardService.java
@@ -78,13 +78,17 @@ public class CupboardService {
     }
 
     /**
-     * Modify a need
-     * // TODO
-     * @param need
-     * @return
+     * Updates a need
+     *
+     * @param id The ID of the need to update
+     * @param need The need object to set (note: the ID is ignored)
+     * @return The updated need object
      * @throws IOException Thrown if there was an issue saving the changes
      */
-    public Need updateNeed(Need need) throws IOException {
+    public Need updateNeed(Need need, int id) throws IOException {
+        if (need.getId() != id) {
+            throw new IllegalArgumentException("ID in URL and body must match");
+        }
         return cupboardDAO.updateNeed(need);
     }
 
diff --git a/ufund-api/src/main/java/com/ufund/api/ufundapi/service/UserService.java b/ufund-api/src/main/java/com/ufund/api/ufundapi/service/UserService.java
index 776d09a..935ee72 100644
--- a/ufund-api/src/main/java/com/ufund/api/ufundapi/service/UserService.java
+++ b/ufund-api/src/main/java/com/ufund/api/ufundapi/service/UserService.java
@@ -45,14 +45,17 @@ public class UserService {
 
     /**
      * Updates a user
-     * // TODO
-     * @param user
-     * @param name
-     * @return
+     *
+     * @param user The ID of the user to update
+     * @param username The user object to set (note: the ID is ignored)
+     * @return The updated user object
      * @throws IOException Thrown if there was any issue saving the data
      */
-    public User updateUser(User user, String name) throws IOException {
-        return userDAO.updateUser(user, name);
+    public User updateUser(User user, String username) throws IOException {
+        if (!user.getUsername().equals(username)) {
+            throw new IllegalArgumentException("ID in URL and body must match");
+        }
+        return userDAO.updateUser(user);
     }
 
     /**