Only people who can manage issue can assign labels to it

Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com>
2015-06-26 16:02:57 +02:00 · 2015-06-26 16:02:57 +02:00 · 58ceb8e950
parent c9f21c9691
commit 58ceb8e950
1 changed files with 1 additions and 1 deletions
--- a/lib/api/issues.rb
+++ b/lib/api/issues.rb
@ -157,7 +157,7 @@ module API
        if issue.valid?
          # Find or create labels and attach to issue. Labels are valid because
          # we already checked its name, so there can't be an error here
-          unless params[:labels].nil?
+          if params[:labels] && can?(current_user, :admin_issue, user_project)
            issue.remove_labels
            # Create and add labels to the new created issue
            issue.add_labels_by_names(params[:labels].split(','))