diff options
author | Eric Davis <edavis@littlestreamsoftware.com> | 2010-03-01 18:29:18 +0000 |
---|---|---|
committer | Eric Davis <edavis@littlestreamsoftware.com> | 2010-03-01 18:29:18 +0000 |
commit | f5f5a5f64f2952340083c1286e0e0e8b35ca2931 (patch) | |
tree | 03ed14742922fd3560d954c20883450c33802262 /app | |
parent | 8699e5bbcd57de4a5d2300786f15b546b3a882a1 (diff) | |
download | redmine-f5f5a5f64f2952340083c1286e0e0e8b35ca2931.tar.gz redmine-f5f5a5f64f2952340083c1286e0e0e8b35ca2931.zip |
Verify issues are updated by HTTP PUT only. Regression from r3486.
git-svn-id: svn+ssh://rubyforge.org/var/svn/redmine/trunk@3520 e93f8b46-1217-0410-a6f0-8f06a7374b81
Diffstat (limited to 'app')
-rw-r--r-- | app/controllers/issues_controller.rb | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/app/controllers/issues_controller.rb b/app/controllers/issues_controller.rb index 6fd4f2507..7be137e8b 100644 --- a/app/controllers/issues_controller.rb +++ b/app/controllers/issues_controller.rb @@ -50,7 +50,9 @@ class IssuesController < ApplicationController verify :method => [:post, :delete], :only => :destroy, :render => { :nothing => true, :status => :method_not_allowed } - + + verify :method => :put, :only => :update, :render => {:nothing => true, :status => :method_not_allowed } + def index retrieve_query sort_init(@query.sort_criteria.empty? ? [['id', 'desc']] : @query.sort_criteria) |