summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorDmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com>2014-08-15 11:59:19 +0300
committerDmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com>2014-08-15 11:59:19 +0300
commit6063a1e6c1d7b4877b6f2c1168246977aab15fcd (patch)
treed2e61026834f585dec37bcb73542569f6ffbf4fd
parent27cf081e1b0b1df1661aaf0ae6b60b05ef3eb8d8 (diff)
downloadgitlab-ce-6063a1e6c1d7b4877b6f2c1168246977aab15fcd.tar.gz
Add labels api authorization. Update permission doc
Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com>
-rw-r--r--doc/permissions/permissions.md1
-rw-r--r--lib/api/labels.rb3
2 files changed, 4 insertions, 0 deletions
diff --git a/doc/permissions/permissions.md b/doc/permissions/permissions.md
index 29fe521b4d1..db22b7dbe56 100644
--- a/doc/permissions/permissions.md
+++ b/doc/permissions/permissions.md
@@ -23,6 +23,7 @@ If a user is a GitLab administrator they receive all permissions.
| Add tags | | | ✓ | ✓ | ✓ |
| Write a wiki | | | ✓ | ✓ | ✓ |
| Manage issue tracker | | | ✓ | ✓ | ✓ |
+| Manage labels | | | ✓ | ✓ | ✓ |
| Create new milestones | | | | ✓ | ✓ |
| Add new team members | | | | ✓ | ✓ |
| Push to protected branches | | | | ✓ | ✓ |
diff --git a/lib/api/labels.rb b/lib/api/labels.rb
index c73a4dbe916..d1684b2293c 100644
--- a/lib/api/labels.rb
+++ b/lib/api/labels.rb
@@ -24,6 +24,7 @@ module API
# Example Request:
# POST /projects/:id/labels
post ':id/labels' do
+ authorize! :admin_label, user_project
required_attributes! [:name, :color]
attrs = attributes_for_keys [:name, :color]
@@ -51,6 +52,7 @@ module API
# Example Request:
# DELETE /projects/:id/labels
delete ':id/labels' do
+ authorize! :admin_label, user_project
required_attributes! [:name]
label = user_project.find_label(params[:name])
@@ -71,6 +73,7 @@ module API
# Example Request:
# PUT /projects/:id/labels
put ':id/labels' do
+ authorize! :admin_label, user_project
required_attributes! [:name]
label = user_project.find_label(params[:name])