From: miks <miks@cubesystems.lv>
Date: Mon, 10 Sep 2012 13:50:01 +0000 (+0300)
Subject: Add authorization to hooks requests
X-Git-Tag: v2.9.0~39^2
X-Git-Url: http://git.osdn.net/view?a=commitdiff_plain;h=6d76e000d07300ab9e8e8c74b90db0abcdc48451;p=wvm%2Fgitlab.git

Add authorization to hooks requests
---

diff --git a/lib/api/projects.rb b/lib/api/projects.rb
index dfdd359c2..cf23dc5f5 100644
--- a/lib/api/projects.rb
+++ b/lib/api/projects.rb
@@ -113,6 +113,7 @@ module Gitlab
       # Example Request:
       #   GET /projects/:id/hooks
       get ":id/hooks" do
+        authorize! :admin_project, user_project
         @hooks = paginate user_project.hooks
         present @hooks, with: Entities::Hook
       end
@@ -125,6 +126,7 @@ module Gitlab
       # Example Request:
       #   POST /projects/:id/hooks
       post ":id/hooks" do
+        authorize! :admin_project, user_project
         @hook = user_project.hooks.new({"url" => params[:url]})
         if @hook.save
           present @hook, with: Entities::Hook
@@ -141,6 +143,7 @@ module Gitlab
       # Example Request:
       #   DELETE /projects/:id/hooks
       delete ":id/hooks" do
+        authorize! :admin_project, user_project
         @hook = user_project.hooks.find(params[:hook_id])
         @hook.destroy
         nil