e9d3b96595
When a user is not authorized to see the list of hooks for a project, he is still able to access the hooks separately. For example if access to `GET /projects/:id/hooks` fails and returns a `403 Unauthorized` error it is still possible to access a hook directly via `GET /projects/:id/hooks/:hook_id`. Fixes access, also added tests to check access and status codes of hooks. |
||
---|---|---|
.. | ||
admin | ||
api | ||
atom | ||
security | ||
gitlab_flavored_markdown_spec.rb | ||
issues_spec.rb | ||
notes_on_merge_requests_spec.rb | ||
notes_on_wall_spec.rb | ||
profile_spec.rb | ||
projects_deploy_keys_spec.rb | ||
projects_spec.rb | ||
search_spec.rb | ||
snippets_spec.rb |