diff options
| author | Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com> | 2015-02-24 20:08:34 +0300 |
|---|---|---|
| committer | Marin Jankovski <maxlazio@gmail.com> | 2015-02-24 23:36:17 +0300 |
| commit | eb4845f4f3f9209393f0b5b3a7b7fcbe695e0ac8 (patch) | |
| tree | 4f043301346f37245a6491eeb2e9871bdea05452 | |
| parent | b313c8f5125f827d5279f6229b5a20a07bcadca2 (diff) | |
Fix access to attachments uploaded with 'Choose file' button for public
access
| -rw-r--r-- | app/controllers/files_controller.rb | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/app/controllers/files_controller.rb b/app/controllers/files_controller.rb index 9671245d3f4..a130bcba9c9 100644 --- a/app/controllers/files_controller.rb +++ b/app/controllers/files_controller.rb @@ -1,4 +1,6 @@ class FilesController < ApplicationController + skip_before_filter :authenticate_user!, :reject_blocked + def download note = Note.find(params[:id]) uploader = note.attachment |