summaryrefslogtreecommitdiff
path: root/lib/api/builds.rb
diff options
context:
space:
mode:
authorLin Jen-Shin <godfat@godfat.org>2016-07-20 22:40:49 +0800
committerLin Jen-Shin <godfat@godfat.org>2016-07-20 22:40:49 +0800
commitff3776c8d5a84f7ea6b1b50ad8c7add02d3f0434 (patch)
tree47de4b3213222703e28b4b015aac523f4e0d0a39 /lib/api/builds.rb
parent88aacaa7e5ec57b85749028f4463a498fc1e35f1 (diff)
downloadgitlab-ce-ff3776c8d5a84f7ea6b1b50ad8c7add02d3f0434.tar.gz
Should check against `authorize_read_builds!`
Diffstat (limited to 'lib/api/builds.rb')
-rw-r--r--lib/api/builds.rb2
1 files changed, 2 insertions, 0 deletions
diff --git a/lib/api/builds.rb b/lib/api/builds.rb
index 7e5114052c4..657d421fe97 100644
--- a/lib/api/builds.rb
+++ b/lib/api/builds.rb
@@ -83,6 +83,8 @@ module API
# GET /projects/:id/artifacts/:ref_name/download?job=name
get ':id/builds/artifacts/:ref_name/download',
requirements: { ref_name: /.+/ } do
+ authorize_read_builds!
+
builds = user_project.latest_successful_builds_for(params[:ref_name])
latest_build = builds.find_by!(name: params[:job])