1 files changed, 4 insertions, 4 deletions
diff --git a/lib/api/triggers.rb b/lib/api/triggers.rb
index dd6801664b1..276d3b5fb79 100644
--- a/lib/api/triggers.rb
+++ b/lib/api/triggers.rb
@@ -15,16 +15,16 @@ module API
         optional :variables, type: Hash, desc: 'The list of variables to be injected into build'
       end
       post ":id/(ref/:ref/)trigger/pipeline", requirements: { ref: /.+/ } do
+        authenticate!
+        authorize! :admin_build, user_project
+
         # validate variables
         params[:variables] = params[:variables].to_h
         unless params[:variables].all? { |key, value| key.is_a?(String) && value.is_a?(String) }
           render_api_error!('variables needs to be a map of key-valued strings', 400)
         end
 
-        project = find_project(params[:id])
-        not_found! unless project
-
-        result = Ci::PipelineTriggerService.new(project, nil, params).execute
+        result = Ci::PipelineTriggerService.new(user_project, nil, params).execute
         not_found! unless result
 
         if result[:http_status]