Authorize user on note update

1216a62e · Jack Weeden · 20b2a0b2 · 1216a62e
Commit 1216a62e authored Jun 26, 2013 by Jack Weeden
Hide whitespace changes
Inline Side-by-side

Showing with 1 addition and 0 deletions

app/controllers/notes_controller.rb app/controllers/notes_controller.rb +1 -0

No files found.
--- a/app/controllers/notes_controller.rb
+++ b/app/controllers/notes_controller.rb
@@ -2,6 +2,7 @@ class NotesController < ProjectResourceController
  # Authorize
  before_filter :authorize_read_note!
  before_filter :authorize_write_note!, only: [:create]
+  before_filter :authorize_modify_note!, only: [:update]

  respond_to :js