API: Protect project deploy keys from unauthorized access

Dmitriy Zaporozhets
1 parent 6c8444f2
Showing 1 changed file with 1 additions and 0 deletions Show diff stats
lib/api/deploy_keys.rb
@@ -2,6 +2,7 @@ module API
   # Projects API
   class DeployKeys < Grape::API
     before { authenticate! }
+    before { authorize_admin_project }
  
     resource :projects do
       helpers do
...	...	@@ -2,6 +2,7 @@ module API
2	2	# Projects API
3	3	class DeployKeys < Grape::API
4	4	before { authenticate! }
	5	+ before { authorize_admin_project }
5	6
6	7	resource :projects do
7	8	helpers do
...	...