deac/gitlabhq
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

Per project protection

Browse source
This commit is contained in:
Dmitriy Zaporozhets 2013-02-15 09:51:21 +02:00
parent 4821aa6c25
commit f6cc71bc36
1 changed files with 8 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
app/controllers/files_controller.rb
View file

@ -1,7 +1,13 @@
class FilesController < ApplicationController class FilesController < ApplicationController
def download def download
uploader = Note.find(params[:id]).attachment note = Note.find(params[:id])
if can?(current_user, :read_project, note.project)
uploader = note.attachment
send_file uploader.file.path, disposition: 'attachment' send_file uploader.file.path, disposition: 'attachment'
else
not_found!
end
end end
end end