Fix Issues#bulk_update

Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com>
This commit is contained in:
Dmitriy Zaporozhets 2014-02-10 15:36:58 +02:00
parent 5a098e84e4
commit 58ac731c37
No known key found for this signature in database
GPG Key ID: 627C5F589F467F17
2 changed files with 7 additions and 3 deletions

View File

@ -9,7 +9,10 @@ class Projects::IssuesController < Projects::ApplicationController
before_filter :authorize_write_issue!, only: [:new, :create]
# Allow modify issue
before_filter :authorize_modify_issue!, only: [:edit, :update, :bulk_update]
before_filter :authorize_modify_issue!, only: [:edit, :update]
# Allow issues bulk update
before_filter :authorize_admin_issues!, only: [:bulk_update]
respond_to :html
@ -107,8 +110,8 @@ class Projects::IssuesController < Projects::ApplicationController
return render_404 unless can?(current_user, :modify_issue, @issue)
end
def authorize_admin_issue!
return render_404 unless can?(current_user, :admin_issue, @issue)
def authorize_admin_issues!
return render_404 unless can?(current_user, :admin_issue, @project)
end
def module_enabled

View File

@ -126,6 +126,7 @@ class Ability
:write_merge_request,
:write_wiki,
:modify_issue,
:admin_issue,
:push_code
]
end