diff options
| author | Jarka Kadlecova <jarka@gitlab.com> | 2017-05-03 18:26:49 +0300 |
|---|---|---|
| committer | Jarka Kadlecova <jarka@gitlab.com> | 2017-05-31 08:17:03 +0300 |
| commit | 4464c22d6d23d893494682d309aec3fb31c11ae3 (patch) | |
| tree | cb7490034185f79c88db472650b87afdcdbafa3f /app/controllers/uploads_controller.rb | |
| parent | 8039b9c3c6caedc19e0e44d086a007e8975134b7 (diff) | |
Support descriptions for snippets
Diffstat (limited to 'app/controllers/uploads_controller.rb')
| -rw-r--r-- | app/controllers/uploads_controller.rb | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/app/controllers/uploads_controller.rb b/app/controllers/uploads_controller.rb index eef53730291..5cb3de3d4f5 100644 --- a/app/controllers/uploads_controller.rb +++ b/app/controllers/uploads_controller.rb @@ -9,6 +9,8 @@ class UploadsController < ApplicationController private def find_model + return nil unless params[:id] + return render_404 unless upload_model && upload_mount @model = upload_model.find(params[:id]) @@ -33,6 +35,8 @@ class UploadsController < ApplicationController end def authorize_create_access! + return unless model + # for now we support only personal snippets comments authorized = can?(current_user, :comment_personal_snippet, model) |