Auth for API

2012-09-10 09:06:11 +03:00 · 2012-09-10 09:06:11 +03:00 · b565f33472
commit b565f33472
parent 80685596d3
4 changed files with 27 additions and 0 deletions
--- a/lib/api/milestones.rb
+++ b/lib/api/milestones.rb
@ -61,6 +61,8 @@ module Gitlab
      # Example Request:
      #   PUT /projects/:id/milestones/:milestone_id
      put ":id/milestones/:milestone_id" do
+        authorize! :admin_milestone, user_project
+
        @milestone = user_project.milestones.find(params[:milestone_id])
        parameters = {
          title: (params[:title] || @milestone.title),