summaryrefslogtreecommitdiff
path: root/app/controllers
diff options
context:
space:
mode:
authorDouwe Maan <douwe@gitlab.com>2016-03-02 11:00:25 +0000
committerDouwe Maan <douwe@gitlab.com>2016-03-02 11:00:25 +0000
commit386d442a18ec758330942ff5feefd02cb403e817 (patch)
treea119b3ef3e6241a6e8780d006e53060ed3caf6e1 /app/controllers
parent4eec96eb7ae64208999938685247aa426a24c815 (diff)
parent8b02d962abd47e9e9c3bbd51bdd285bbb476b8d1 (diff)
downloadgitlab-ce-386d442a18ec758330942ff5feefd02cb403e817.tar.gz
Merge branch 'fix/deprecated-ci-badge-permissions' into 'master'
Fix permissions for deprecated CI build status badge This fixes permissions for deprecated status badge, being unavailable even if project is public. Closes #13324 See merge request !3030
Diffstat (limited to 'app/controllers')
-rw-r--r--app/controllers/ci/projects_controller.rb2
1 files changed, 2 insertions, 0 deletions
diff --git a/app/controllers/ci/projects_controller.rb b/app/controllers/ci/projects_controller.rb
index d1824b481d7..081e01a75e0 100644
--- a/app/controllers/ci/projects_controller.rb
+++ b/app/controllers/ci/projects_controller.rb
@@ -3,6 +3,7 @@ module Ci
before_action :project
before_action :authorize_read_project!, except: [:badge]
before_action :no_cache, only: [:badge]
+ skip_before_action :authenticate_user!, only: [:badge]
protect_from_forgery
def show
@@ -18,6 +19,7 @@ module Ci
#
def badge
return render_404 unless @project
+
image = Ci::ImageForBuildService.new.execute(@project, params)
send_file image.path, filename: image.name, disposition: 'inline', type:"image/svg+xml"
end