diff options
| author | Shinya Maeda <shinya@gitlab.com> | 2017-06-26 18:25:08 +0900 |
|---|---|---|
| committer | Shinya Maeda <shinya@gitlab.com> | 2017-07-05 18:38:25 +0900 |
| commit | 6e8ea52be6f75c99556ee4615f6213d991969bfd (patch) | |
| tree | f4d5c894eea7e1bf76a0f21f527e69cf7bcc1af5 /app/controllers/projects/pipeline_schedules_controller.rb | |
| parent | e364c118a05e4d11677b997a5e31b2f1aa8a4a92 (diff) | |
| download | gitlab-ce-6e8ea52be6f75c99556ee4615f6213d991969bfd.tar.gz | |
Add functionality and security.
Diffstat (limited to 'app/controllers/projects/pipeline_schedules_controller.rb')
| -rw-r--r-- | app/controllers/projects/pipeline_schedules_controller.rb | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/app/controllers/projects/pipeline_schedules_controller.rb b/app/controllers/projects/pipeline_schedules_controller.rb index 2ee6229cf68..3f395bd9cea 100644 --- a/app/controllers/projects/pipeline_schedules_controller.rb +++ b/app/controllers/projects/pipeline_schedules_controller.rb @@ -33,6 +33,8 @@ class Projects::PipelineSchedulesController < Projects::ApplicationController end def update + return access_denied! unless can?(current_user, :update_pipeline_schedule, schedule) + if Ci::CreatePipelineScheduleService .new(@project, current_user, schedule_params).update(schedule) redirect_to namespace_project_pipeline_schedules_path(@project.namespace.becomes(Namespace), @project) |