mirror of
https://github.com/opf/openproject.git
synced 2026-06-14 03:30:14 +00:00
adapt access check on filters endpoint
This commit is contained in:
@@ -32,7 +32,9 @@ class Projects::FiltersController < ApplicationController
|
||||
# include QueriesHelper
|
||||
include Queries::Loading
|
||||
|
||||
before_action :require_admin # to be adapted
|
||||
# This is a part of the projects list page which is public. Checks within filters will
|
||||
# prevent sensitive information to be displayed wrongfully.
|
||||
no_authorization_required! :show
|
||||
before_action :load_query_or_deny_access
|
||||
|
||||
def show
|
||||
|
||||
Reference in New Issue
Block a user