Commit 1216a62e authored by Jack Weeden's avatar Jack Weeden

Authorize user on note update

parent 20b2a0b2
...@@ -2,6 +2,7 @@ class NotesController < ProjectResourceController ...@@ -2,6 +2,7 @@ class NotesController < ProjectResourceController
# Authorize # Authorize
before_filter :authorize_read_note! before_filter :authorize_read_note!
before_filter :authorize_write_note!, only: [:create] before_filter :authorize_write_note!, only: [:create]
before_filter :authorize_modify_note!, only: [:update]
respond_to :js respond_to :js
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment