API: Protect project deploy keys from unauthorized access

73f780d6 · Dmitriy Zaporozhets · 6c8444f2 · 73f780d6
Commit 73f780d6 authored Sep 30, 2013 by Dmitriy Zaporozhets
Hide whitespace changes
Inline Side-by-side

Showing with 1 addition and 0 deletions

lib/api/deploy_keys.rb lib/api/deploy_keys.rb +1 -0

No files found.
--- a/lib/api/deploy_keys.rb
+++ b/lib/api/deploy_keys.rb
@@ -2,6 +2,7 @@ module API
  # Projects API
  class DeployKeys < Grape::API
    before { authenticate! }
+    before { authorize_admin_project }

    resource :projects do
      helpers do