Project

General

Profile

Feature #2770 » f2770-unauthorized-attachments.patch

Robert Hailey, 2013-02-14 16:55

View differences:

app/controllers/attachments_controller.rb 2013-02-14 09:43:26.000000000 -0600
20 20
  before_filter :file_readable, :read_authorize, :only => [:show, :download]
21 21
  before_filter :delete_authorize, :only => :destroy
22 22
  before_filter :authorize_global, :only => :upload
23
  skip_before_filter :check_if_login_required
23 24

  
24 25
  accept_api_auth :show, :download, :upload
25 26

  
(6-6/10)