deac/gitlabhq
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

security improved

Browse source
This commit is contained in:
gitlabhq 2011-10-17 13:39:03 +03:00
parent b08e4074b4
commit 783ca89796
9 changed files with 74 additions and 26 deletions
Download patch file Download diff file Expand all files Collapse all files

7
app/controllers/snippets_controller.rb
View file

@ -52,12 +52,11 @@ class SnippetsController < ApplicationController
def destroy
@snippet = @project.snippets.find(params[:id])
authorize_admin_snippet! unless @snippet.author == current_user
return access_denied! unless can?(current_user, :admin_snippet, @snippet)
@snippet.destroy
respond_to do |format|
format.js { render :nothing => true }
end
redirect_to project_snippets_path(@project)
end
end