diff options
| author | Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com> | 2014-08-15 12:59:19 +0400 |
|---|---|---|
| committer | Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com> | 2014-08-15 12:59:19 +0400 |
| commit | 6063a1e6c1d7b4877b6f2c1168246977aab15fcd (patch) | |
| tree | d2e61026834f585dec37bcb73542569f6ffbf4fd | |
| parent | 27cf081e1b0b1df1661aaf0ae6b60b05ef3eb8d8 (diff) | |
Add labels api authorization. Update permission doc
Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com>
| -rw-r--r-- | doc/permissions/permissions.md | 1 | ||||
| -rw-r--r-- | lib/api/labels.rb | 3 |
2 files changed, 4 insertions, 0 deletions
diff --git a/doc/permissions/permissions.md b/doc/permissions/permissions.md index 29fe521b4d1..db22b7dbe56 100644 --- a/doc/permissions/permissions.md +++ b/doc/permissions/permissions.md @@ -23,6 +23,7 @@ If a user is a GitLab administrator they receive all permissions. | Add tags | | | ✓ | ✓ | ✓ | | Write a wiki | | | ✓ | ✓ | ✓ | | Manage issue tracker | | | ✓ | ✓ | ✓ | +| Manage labels | | | ✓ | ✓ | ✓ | | Create new milestones | | | | ✓ | ✓ | | Add new team members | | | | ✓ | ✓ | | Push to protected branches | | | | ✓ | ✓ | diff --git a/lib/api/labels.rb b/lib/api/labels.rb index c73a4dbe916..d1684b2293c 100644 --- a/lib/api/labels.rb +++ b/lib/api/labels.rb @@ -24,6 +24,7 @@ module API # Example Request: # POST /projects/:id/labels post ':id/labels' do + authorize! :admin_label, user_project required_attributes! [:name, :color] attrs = attributes_for_keys [:name, :color] @@ -51,6 +52,7 @@ module API # Example Request: # DELETE /projects/:id/labels delete ':id/labels' do + authorize! :admin_label, user_project required_attributes! [:name] label = user_project.find_label(params[:name]) @@ -71,6 +73,7 @@ module API # Example Request: # PUT /projects/:id/labels put ':id/labels' do + authorize! :admin_label, user_project required_attributes! [:name] label = user_project.find_label(params[:name]) |