summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorMatija Čupić <matteeyah@gmail.com>2018-12-20 04:09:47 +0100
committerMatija Čupić <matteeyah@gmail.com>2018-12-22 12:11:41 +0100
commit0c714937eb868af55c37f1e4900c20dc7015f9c6 (patch)
tree6617bc16eea616496fcd486ad6891c6d381d9891
parent8a36125ada579300f746e0f2207282149acdf1b3 (diff)
downloadgitlab-ce-0c714937eb868af55c37f1e4900c20dc7015f9c6.tar.gz
Move pipeline auth above pipeline assignment
-rw-r--r--lib/api/jobs.rb2
1 files changed, 1 insertions, 1 deletions
diff --git a/lib/api/jobs.rb b/lib/api/jobs.rb
index e2ab60f3855..45c694b6448 100644
--- a/lib/api/jobs.rb
+++ b/lib/api/jobs.rb
@@ -58,8 +58,8 @@ module API
end
# rubocop: disable CodeReuse/ActiveRecord
get ':id/pipelines/:pipeline_id/jobs' do
- pipeline = user_project.ci_pipelines.find(params[:pipeline_id])
authorize!(:read_pipeline, user_project)
+ pipeline = user_project.ci_pipelines.find(params[:pipeline_id])
authorize!(:read_build, pipeline)
builds = pipeline.builds