diff options
| author | Douglas Barbosa Alexandre <dbalexandre@gmail.com> | 2016-02-16 11:14:30 -0200 |
|---|---|---|
| committer | Douglas Barbosa Alexandre <dbalexandre@gmail.com> | 2016-02-20 12:10:26 -0200 |
| commit | 48ddf9a407e0f98949301de7a2cbd7d62f8a4e47 (patch) | |
| tree | f1a813e3c86eaa0507222616c11eeb7de9081e96 /app/controllers/dashboard | |
| parent | b05ab108f8f054e137d6ca3df9c211152afa23c7 (diff) | |
| download | gitlab-ce-48ddf9a407e0f98949301de7a2cbd7d62f8a4e47.tar.gz | |
Remove task abilities, since we will only ever show the user their own
Diffstat (limited to 'app/controllers/dashboard')
| -rw-r--r-- | app/controllers/dashboard/tasks_controller.rb | 8 |
1 files changed, 0 insertions, 8 deletions
diff --git a/app/controllers/dashboard/tasks_controller.rb b/app/controllers/dashboard/tasks_controller.rb index 2f049da661c..d5f835babdc 100644 --- a/app/controllers/dashboard/tasks_controller.rb +++ b/app/controllers/dashboard/tasks_controller.rb @@ -1,6 +1,4 @@ class Dashboard::TasksController < Dashboard::ApplicationController - before_action :authorize_destroy_task!, only: [:destroy] - def index @tasks = case params[:state] when 'done' @@ -23,12 +21,6 @@ class Dashboard::TasksController < Dashboard::ApplicationController private - def authorize_destroy_task! - unless can?(current_user, :destroy_task, task) - return render_404 - end - end - def task @task ||= current_user.tasks.find(params[:id]) end |