diff options
| author | Jean-Philippe Lang <jp_lang@yahoo.fr> | 2017-06-26 19:49:02 +0000 |
|---|---|---|
| committer | Jean-Philippe Lang <jp_lang@yahoo.fr> | 2017-06-26 19:49:02 +0000 |
| commit | b03e03b7704a50639f143806471386fab4900835 (patch) | |
| tree | 072426e6ef00d2cfe0a95b27405e149663339a7d /app/controllers/news_controller.rb | |
| parent | d5bec063e7b656974b09f9d5f9bf29326a041b7c (diff) | |
| download | redmine-b03e03b7704a50639f143806471386fab4900835.tar.gz redmine-b03e03b7704a50639f143806471386fab4900835.zip | |
Global News view should not be allowed without permission (#7068).
git-svn-id: http://svn.redmine.org/redmine/trunk@16721 e93f8b46-1217-0410-a6f0-8f06a7374b81
Diffstat (limited to 'app/controllers/news_controller.rb')
| -rw-r--r-- | app/controllers/news_controller.rb | 10 |
1 files changed, 0 insertions, 10 deletions
diff --git a/app/controllers/news_controller.rb b/app/controllers/news_controller.rb index 727617cb7..3df9e5e44 100644 --- a/app/controllers/news_controller.rb +++ b/app/controllers/news_controller.rb @@ -98,14 +98,4 @@ class NewsController < ApplicationController @news.destroy redirect_to project_news_index_path(@project) end - - private - - def find_optional_project - return true unless params[:project_id] - @project = Project.find(params[:project_id]) - authorize - rescue ActiveRecord::RecordNotFound - render_404 - end end |