diff options
| author | Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com> | 2013-02-20 02:45:07 -0800 |
|---|---|---|
| committer | Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com> | 2013-02-20 02:45:07 -0800 |
| commit | 25e4c512d4b31f42d36d661acab7a6c6c91e77a8 (patch) | |
| tree | 934aa362725943766f0fcbfc1fda1be4b197c974 /lib/api/projects.rb | |
| parent | c56d32c73e22b705ca6623c98b7a264440873726 (diff) | |
| parent | e9d3b9659525c23a1d8c3b755c792040a5b41148 (diff) | |
| download | gitlab-ce-25e4c512d4b31f42d36d661acab7a6c6c91e77a8.tar.gz | |
Merge pull request #3011 from Asquera/fix_access_to_nonvisible_hook
API: fixes visibility of project hook
Diffstat (limited to 'lib/api/projects.rb')
| -rw-r--r-- | lib/api/projects.rb | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/lib/api/projects.rb b/lib/api/projects.rb index d416121a78a..921aa237f26 100644 --- a/lib/api/projects.rb +++ b/lib/api/projects.rb @@ -155,6 +155,7 @@ module Gitlab # Example Request: # GET /projects/:id/hooks/:hook_id get ":id/hooks/:hook_id" do + authorize! :admin_project, user_project @hook = user_project.hooks.find(params[:hook_id]) present @hook, with: Entities::Hook end |