deac/gitlabhq
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

Abilities extended. Resources security improved

Browse source
This commit is contained in:
Dmitriy Zaporozhets 2012-02-22 00:31:18 +02:00
parent af82b6773b
commit 8c40aab120
16 changed files with 51 additions and 52 deletions
Download patch file Download diff file Expand all files Collapse all files

4
app/controllers/application_controller.rb
View file

@ -48,6 +48,10 @@ class ApplicationController < ActionController::Base
return render_404 unless can?(current_user, action, project)
end
def authorize_code_access!
return render_404 unless can?(current_user, :download_code, project)
end
def access_denied!
render_404
end