byterazor/redmine_glossary
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

[bugfix]before calling authorize, should call find_project

Browse Source
This commit is contained in:
Toru Takahashi 2018-05-23 03:43:26 +09:00 committed by TAKAHASHI,Toru
parent 219f876401
commit 4c7956ffa8
1 changed files with 2 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
app/controllers/glossary_terms_controller.rb
View File

@ -1,8 +1,7 @@
class GlossaryTermsController < ApplicationController class GlossaryTermsController < ApplicationController
before_action :authorize
before_action :find_term_from_id, only: [:show, :edit, :update, :destroy] before_action :find_term_from_id, only: [:show, :edit, :update, :destroy]
before_action :find_project_from_id before_action :find_project_from_id, :authorize
def index def index
@glossary_terms = GlossaryTerm.where(project_id: @project.id) @glossary_terms = GlossaryTerm.where(project_id: @project.id)