From 4f795ed823776912e8e9d6d4eb33c345ad2b56b9 Mon Sep 17 00:00:00 2001
From: Mark Chao <mchao@gitlab.com>
Date: Wed, 4 Jul 2018 17:52:58 +0800
Subject: Backport from EE !5954

Allow Labels::FindOrCreateService to find ancestor group labels
Add authentication check on API endpoint
Update flayignore
---
 lib/api/boards.rb | 1 +
 1 file changed, 1 insertion(+)

(limited to 'lib/api/boards.rb')

diff --git a/lib/api/boards.rb b/lib/api/boards.rb
index 6c706b2b4e1..086d39d5070 100644
--- a/lib/api/boards.rb
+++ b/lib/api/boards.rb
@@ -33,6 +33,7 @@ module API
           success Entities::Board
         end
         get '/:board_id' do
+          authorize!(:read_board, user_project)
           present board, with: Entities::Board
         end
       end
-- 
cgit v1.2.1