API: Protect project deploy keys from unauthorized access

73f780d6 · Dmitriy Zaporozhets · 6c8444f2 · 73f780d6
隐藏空白更改
内联并排

Showing with 1 addition and 0 deletion

lib/api/deploy_keys.rb lib/api/deploy_keys.rb +1 -0

未找到文件。
--- a/lib/api/deploy_keys.rb
+++ b/lib/api/deploy_keys.rb
@@ -2,6 +2,7 @@ module API
  # Projects API
  class DeployKeys < Grape::API
    before { authenticate! }
+    before { authorize_admin_project }

    resource :projects do
      helpers do