diff options
| author | Shinya Maeda <shinya@gitlab.com> | 2017-09-04 21:53:19 +0900 |
|---|---|---|
| committer | Shinya Maeda <shinya@gitlab.com> | 2017-09-04 21:53:19 +0900 |
| commit | 2f906430fa9efa61b7808e5849611fef6ecb59a5 (patch) | |
| tree | 8022488fcb64c2e7f92d95636ac30f87b703092e /lib | |
| parent | bb22989c388bb7322e95af72c48d8422494d96e7 (diff) | |
| download | gitlab-ce-2f906430fa9efa61b7808e5849611fef6ecb59a5.tar.gz | |
Fix security breachingfeature/sm/34518-extend-api-pipeline-schedule-variable-new
Diffstat (limited to 'lib')
| -rw-r--r-- | lib/api/pipeline_schedules.rb | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/lib/api/pipeline_schedules.rb b/lib/api/pipeline_schedules.rb index 51baf12e287..37f32411296 100644 --- a/lib/api/pipeline_schedules.rb +++ b/lib/api/pipeline_schedules.rb @@ -167,7 +167,7 @@ module API .pipeline_schedules .preload(:owner, :last_pipeline) .find_by(id: params.delete(:pipeline_schedule_id)).tap do |pipeline_schedule| - unless pipeline_schedule || can?(current_user, :read_pipeline_schedule, pipeline_schedule) + unless can?(current_user, :read_pipeline_schedule, pipeline_schedule) not_found!('Pipeline Schedule') end end |