diff options
| author | Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com> | 2013-07-17 08:26:00 +0300 |
|---|---|---|
| committer | Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com> | 2013-07-17 08:26:00 +0300 |
| commit | 9ea5766c3554843b88bfb65de48872ccd50363e7 (patch) | |
| tree | 50dd6a986c6bcb6acb5403156f1d21371c4e610b /app/controllers/projects/tags_controller.rb | |
| parent | 29306dd6a41a20210bc30775a437a67649b99038 (diff) | |
| download | gitlab-ce-9ea5766c3554843b88bfb65de48872ccd50363e7.tar.gz | |
Improve permissions on tags/branches
Diffstat (limited to 'app/controllers/projects/tags_controller.rb')
| -rw-r--r-- | app/controllers/projects/tags_controller.rb | 5 |
1 files changed, 3 insertions, 2 deletions
diff --git a/app/controllers/projects/tags_controller.rb b/app/controllers/projects/tags_controller.rb index 32eb37b2fcb..55b2f5b1ae9 100644 --- a/app/controllers/projects/tags_controller.rb +++ b/app/controllers/projects/tags_controller.rb @@ -1,10 +1,11 @@ class Projects::TagsController < Projects::ApplicationController # Authorize before_filter :authorize_read_project! - before_filter :authorize_code_access! before_filter :require_non_empty_project - before_filter :authorize_admin_project!, only: [:destroy, :create] + before_filter :authorize_code_access! + before_filter :authorize_push!, only: [:create] + before_filter :authorize_admin_project!, only: [:destroy] def index @tags = Kaminari.paginate_array(@project.repository.tags).page(params[:page]).per(30) |