summaryrefslogtreecommitdiffstats
path: root/app
diff options
context:
space:
mode:
authorEric Davis <edavis@littlestreamsoftware.com>2010-03-01 18:29:18 +0000
committerEric Davis <edavis@littlestreamsoftware.com>2010-03-01 18:29:18 +0000
commitf5f5a5f64f2952340083c1286e0e0e8b35ca2931 (patch)
tree03ed14742922fd3560d954c20883450c33802262 /app
parent8699e5bbcd57de4a5d2300786f15b546b3a882a1 (diff)
downloadredmine-f5f5a5f64f2952340083c1286e0e0e8b35ca2931.tar.gz
redmine-f5f5a5f64f2952340083c1286e0e0e8b35ca2931.zip
Verify issues are updated by HTTP PUT only. Regression from r3486.
git-svn-id: svn+ssh://rubyforge.org/var/svn/redmine/trunk@3520 e93f8b46-1217-0410-a6f0-8f06a7374b81
Diffstat (limited to 'app')
-rw-r--r--app/controllers/issues_controller.rb4
1 files changed, 3 insertions, 1 deletions
diff --git a/app/controllers/issues_controller.rb b/app/controllers/issues_controller.rb
index 6fd4f2507..7be137e8b 100644
--- a/app/controllers/issues_controller.rb
+++ b/app/controllers/issues_controller.rb
@@ -50,7 +50,9 @@ class IssuesController < ApplicationController
verify :method => [:post, :delete],
:only => :destroy,
:render => { :nothing => true, :status => :method_not_allowed }
-
+
+ verify :method => :put, :only => :update, :render => {:nothing => true, :status => :method_not_allowed }
+
def index
retrieve_query
sort_init(@query.sort_criteria.empty? ? [['id', 'desc']] : @query.sort_criteria)