diff options
| author | Stan Hu <stanhu@gmail.com> | 2016-04-24 21:45:26 -0700 |
|---|---|---|
| committer | Stan Hu <stanhu@gmail.com> | 2016-04-25 12:02:06 -0700 |
| commit | d5267dfd0dac8e4cab4919bf8aca611de3a5497b (patch) | |
| tree | 522d7edfaaf022e2d41cba82a76187777c9e9a2c /spec/requests/api/projects_spec.rb | |
| parent | 81cb636e4fcb7ea76db84a92aac65a73f2376458 (diff) | |
| download | gitlab-ce-d5267dfd0dac8e4cab4919bf8aca611de3a5497b.tar.gz | |
Prevent private snippets in public/internal projects from being leaked via API
Closes https://gitlab.com/gitlab-org/gitlab-ce/issues/15580
Diffstat (limited to 'spec/requests/api/projects_spec.rb')
| -rw-r--r-- | spec/requests/api/projects_spec.rb | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/spec/requests/api/projects_spec.rb b/spec/requests/api/projects_spec.rb index fccd08bd6da..66193eac051 100644 --- a/spec/requests/api/projects_spec.rb +++ b/spec/requests/api/projects_spec.rb @@ -11,7 +11,7 @@ describe API::API, api: true do let(:project) { create(:project, creator_id: user.id, namespace: user.namespace) } let(:project2) { create(:project, path: 'project2', creator_id: user.id, namespace: user.namespace) } let(:project3) { create(:project, path: 'project3', creator_id: user.id, namespace: user.namespace) } - let(:snippet) { create(:project_snippet, author: user, project: project, title: 'example') } + let(:snippet) { create(:project_snippet, :public, author: user, project: project, title: 'example') } let(:project_member) { create(:project_member, :master, user: user, project: project) } let(:project_member2) { create(:project_member, :developer, user: user3, project: project) } let(:user4) { create(:user) } |