From d51e8e1b77d78dd80a9fb9d362219b8b47b83904 Mon Sep 17 00:00:00 2001 From: Grzegorz Bizon Date: Mon, 8 Feb 2016 13:53:30 +0100 Subject: Inherit build badge access permissions from project --- app/controllers/projects/builds_controller.rb | 14 ++++---------- 1 file changed, 4 insertions(+), 10 deletions(-) (limited to 'app/controllers/projects/builds_controller.rb') diff --git a/app/controllers/projects/builds_controller.rb b/app/controllers/projects/builds_controller.rb index 9d419b07e53..0aef477811f 100644 --- a/app/controllers/projects/builds_controller.rb +++ b/app/controllers/projects/builds_controller.rb @@ -4,10 +4,6 @@ class Projects::BuildsController < Projects::ApplicationController before_action :authorize_update_build!, except: [:index, :show, :status] layout 'project' - # Skip authentication for status badge only - skip_before_action :authenticate_user!, :reject_blocked!, :project, - :repository, :authorize_manage_builds!, :build, only: [:badge] - def index @scope = params[:scope] @all_builds = project.builds @@ -51,18 +47,16 @@ class Projects::BuildsController < Projects::ApplicationController redirect_to build_path(build) end - def status - render json: @build.to_json(only: [:status, :id, :sha, :coverage], methods: :sha) - end - def cancel @build.cancel redirect_to build_path(@build) end - def badge - project = Project.find_with_namespace("#{params[:namespace_id]}/#{params[:project_id]}") + def status + render json: @build.to_json(only: [:status, :id, :sha, :coverage], methods: :sha) + end + def badge respond_to do |format| format.html { render_404 } format.svg do -- cgit v1.2.1