summaryrefslogtreecommitdiff
path: root/app
diff options
context:
space:
mode:
authorDouwe Maan <douwe@gitlab.com>2016-03-02 11:00:25 +0000
committerRémy Coutable <remy@rymai.me>2016-03-02 12:08:21 +0100
commit4d857c08d5c38d5af064cd5f03ae9c55fb675cfe (patch)
tree0685364b9c09232bb92760f701cffad92aaf0f58 /app
parent26959be0cfb6eecbd22699312ea3583c1be57296 (diff)
downloadgitlab-ce-4d857c08d5c38d5af064cd5f03ae9c55fb675cfe.tar.gz
Merge branch 'fix/deprecated-ci-badge-permissions' into 'master'
Fix permissions for deprecated CI build status badge This fixes permissions for deprecated status badge, being unavailable even if project is public. Closes #13324 See merge request !3030
Diffstat (limited to 'app')
-rw-r--r--app/controllers/ci/projects_controller.rb2
1 files changed, 2 insertions, 0 deletions
diff --git a/app/controllers/ci/projects_controller.rb b/app/controllers/ci/projects_controller.rb
index d1824b481d7..081e01a75e0 100644
--- a/app/controllers/ci/projects_controller.rb
+++ b/app/controllers/ci/projects_controller.rb
@@ -3,6 +3,7 @@ module Ci
before_action :project
before_action :authorize_read_project!, except: [:badge]
before_action :no_cache, only: [:badge]
+ skip_before_action :authenticate_user!, only: [:badge]
protect_from_forgery
def show
@@ -18,6 +19,7 @@ module Ci
#
def badge
return render_404 unless @project
+
image = Ci::ImageForBuildService.new.execute(@project, params)
send_file image.path, filename: image.name, disposition: 'inline', type:"image/svg+xml"
end