API: Protect project deploy keys from unauthorized access

Dmitriy Zaporozhets
1 parent 6c8444f2
Showing 1 changed file with 1 additions and 0 deletions Show diff stats
lib/api/deploy_keys.rb
@@ -2,6 +2,7 @@ module API
   # Projects API
   class DeployKeys < Grape::API
     before { authenticate! }
+    before { authorize_admin_project }
     resource :projects do
       helpers do
	@@ -2,6 +2,7 @@ module API		@@ -2,6 +2,7 @@ module API
2	# Projects API	2	# Projects API
3	class DeployKeys < Grape::API	3	class DeployKeys < Grape::API
4	before { authenticate! }	4	before { authenticate! }
		5	+ before { authorize_admin_project }
5		6
6	resource :projects do	7	resource :projects do
7	helpers do	8	helpers do