Auth for API

2012-09-10 09:06:11 +03:00 · 2012-09-10 09:06:11 +03:00 · b565f33472
commit b565f33472
parent 80685596d3
4 changed files with 27 additions and 0 deletions
--- a/lib/api/issues.rb
+++ b/lib/api/issues.rb
@ -79,6 +79,8 @@ module Gitlab
      #   PUT /projects/:id/issues/:issue_id
      put ":id/issues/:issue_id" do
        @issue = user_project.issues.find(params[:issue_id])
+        authorize! :modify_issue, @issue
+
        parameters = {
          title: (params[:title] || @issue.title),
          description: (params[:description] || @issue.description),