gitlab-org--gitlab-foss/app/controllers/files_controller.rb

17 lines
377 B
Ruby

class FilesController < ApplicationController
def download
note = Note.find(params[:id])
uploader = note.attachment
if uploader.file_storage?
if can?(current_user, :read_project, note.project)
send_file uploader.file.path, disposition: 'attachment'
else
not_found!
end
else
redirect_to uploader.url
end
end
end