diff options
author | Douwe Maan <douwe@gitlab.com> | 2016-08-30 21:01:41 +0300 |
---|---|---|
committer | Ruben Davila <rdavila84@gmail.com> | 2016-08-31 20:11:33 +0300 |
commit | dc9ef2926fec81ad9c7873f5b10422ecdba5aedc (patch) | |
tree | 0449318bdd23f3b2d0e87259b9d2646fd13f9e3b /app | |
parent | a4ab9759ea614d9807ccf3476ca958f72b4db3c1 (diff) |
Merge branch 'fix-issue-boards-leak-private-labels-names-descriptions' into 'master'
Fix issue boards leak private labels names descriptions
Fixes https://gitlab.com/gitlab-org/gitlab-ce/issues/21167
/cc @stanhu
See merge request !1989
Diffstat (limited to 'app')
-rw-r--r-- | app/services/boards/lists/create_service.rb | 9 |
1 files changed, 6 insertions, 3 deletions
diff --git a/app/services/boards/lists/create_service.rb b/app/services/boards/lists/create_service.rb index 5cb408b9d20..b1887820bd4 100644 --- a/app/services/boards/lists/create_service.rb +++ b/app/services/boards/lists/create_service.rb @@ -3,7 +3,10 @@ module Boards class CreateService < Boards::BaseService def execute List.transaction do - create_list_at(next_position) + label = project.labels.find(params[:label_id]) + position = next_position + + create_list(label, position) end end @@ -14,8 +17,8 @@ module Boards max_position.nil? ? 0 : max_position.succ end - def create_list_at(position) - board.lists.create(params.merge(list_type: :label, position: position)) + def create_list(label, position) + board.lists.create(label: label, list_type: :label, position: position) end end end |