diff options
| author | Robert Speicher <robert@gitlab.com> | 2016-05-31 22:35:13 +0300 |
|---|---|---|
| committer | Yorick Peterse <yorickpeterse@gmail.com> | 2016-06-02 14:49:18 +0300 |
| commit | 3799edd78c4806e4fda788247053a7ee10142e64 (patch) | |
| tree | 884006a2dfcd32ad8d13fdbb542fba0e667464cf /lib | |
| parent | e30c651bbdce9949b3b34c983394d2c95c7c7268 (diff) | |
Merge branch 'data_leak' into 'master'
Confidential notes data leak
Fixes part of https://gitlab.com/gitlab-org/gitlab-ee/issues/575
See merge request !1967
Diffstat (limited to 'lib')
| -rw-r--r-- | lib/gitlab/project_search_results.rb | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/lib/gitlab/project_search_results.rb b/lib/gitlab/project_search_results.rb index 71c5b6801fb..183bd10d6a3 100644 --- a/lib/gitlab/project_search_results.rb +++ b/lib/gitlab/project_search_results.rb @@ -74,7 +74,7 @@ module Gitlab end def notes - project.notes.user.search(query).order('updated_at DESC') + project.notes.user.search(query, as_user: @current_user).order('updated_at DESC') end def commits |