diff options
| author | Matija Čupić <matteeyah@gmail.com> | 2018-12-14 18:36:33 +0300 |
|---|---|---|
| committer | Matija Čupić <matteeyah@gmail.com> | 2018-12-22 14:11:25 +0300 |
| commit | bd96ffb2ee863890f71c67b19230cfe2761c9612 (patch) | |
| tree | b9e812a5f7f72ee5daca881872b8013b53e2cd33 /lib | |
| parent | d2120ff1e705799752e7d9704cae3f1896d8e186 (diff) | |
Authorize read_build action when listing jobs
Diffstat (limited to 'lib')
| -rw-r--r-- | lib/api/jobs.rb | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/lib/api/jobs.rb b/lib/api/jobs.rb index 80a5cbd6b19..3cfeb9a2784 100644 --- a/lib/api/jobs.rb +++ b/lib/api/jobs.rb @@ -38,6 +38,8 @@ module API end # rubocop: disable CodeReuse/ActiveRecord get ':id/jobs' do + authorize_read_builds! + builds = user_project.builds.order('id DESC') builds = filter_builds(builds, params[:scope]) |