Commit 58ac731c3764d1cbf3a4a1e60e5c5374ec460546

Authored by Dmitriy Zaporozhets
1 parent 5a098e84

Fix Issues#bulk_update

Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com>
app/controllers/projects/issues_controller.rb
... ... @@ -9,7 +9,10 @@ class Projects::IssuesController &lt; Projects::ApplicationController
9 9 before_filter :authorize_write_issue!, only: [:new, :create]
10 10  
11 11 # Allow modify issue
12   - before_filter :authorize_modify_issue!, only: [:edit, :update, :bulk_update]
  12 + before_filter :authorize_modify_issue!, only: [:edit, :update]
  13 +
  14 + # Allow issues bulk update
  15 + before_filter :authorize_admin_issues!, only: [:bulk_update]
13 16  
14 17 respond_to :html
15 18  
... ... @@ -107,8 +110,8 @@ class Projects::IssuesController &lt; Projects::ApplicationController
107 110 return render_404 unless can?(current_user, :modify_issue, @issue)
108 111 end
109 112  
110   - def authorize_admin_issue!
111   - return render_404 unless can?(current_user, :admin_issue, @issue)
  113 + def authorize_admin_issues!
  114 + return render_404 unless can?(current_user, :admin_issue, @project)
112 115 end
113 116  
114 117 def module_enabled
... ...
app/models/ability.rb
... ... @@ -126,6 +126,7 @@ class Ability
126 126 :write_merge_request,
127 127 :write_wiki,
128 128 :modify_issue,
  129 + :admin_issue,
129 130 :push_code
130 131 ]
131 132 end
... ...