From 73f780d640e442c9b2d9eb4fc7297f91c6cc76ee Mon Sep 17 00:00:00 2001
From: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com>
Date: Mon, 30 Sep 2013 16:47:26 +0300
Subject: [PATCH] API: Protect project deploy keys from unauthorized access
---
lib/api/deploy_keys.rb | 1 +
1 file changed, 1 insertion(+)
diff --git a/lib/api/deploy_keys.rb b/lib/api/deploy_keys.rb
index 55c947eb176..218b3d8eee2 100644
--- a/lib/api/deploy_keys.rb
+++ b/lib/api/deploy_keys.rb
@@ -2,6 +2,7 @@ module API
# Projects API
class DeployKeys < Grape::API
before { authenticate! }
+ before { authorize_admin_project }
resource :projects do
helpers do
--
GitLab