diff options
| author | Julien Lancelot <julien.lancelot@gmail.com> | 2013-06-04 16:59:40 +0200 |
|---|---|---|
| committer | Julien Lancelot <julien.lancelot@gmail.com> | 2013-06-04 16:59:40 +0200 |
| commit | 01809e26ca0408b39a6153a57c5509e0df98350e (patch) | |
| tree | 7f3b03a280c54679b125fc3d213f04cbd2d222a9 | |
| parent | fefb1a38eb6a7f1794430d9860684091d4ac7d24 (diff) | |
| download | sonarqube-01809e26ca0408b39a6153a57c5509e0df98350e.tar.gz sonarqube-01809e26ca0408b39a6153a57c5509e0df98350e.zip | |
SONAR-3755 Remove requirement of role super admin on action plan actions (security is checked in AcitonPlanService and user should ony by admin of the project, not be super admin)
| -rw-r--r-- | sonar-server/src/main/webapp/WEB-INF/app/controllers/api/action_plans_controller.rb | 7 |
1 files changed, 1 insertions, 6 deletions
diff --git a/sonar-server/src/main/webapp/WEB-INF/app/controllers/api/action_plans_controller.rb b/sonar-server/src/main/webapp/WEB-INF/app/controllers/api/action_plans_controller.rb index d3a15fce5ed..9e8fdfa36ec 100644 --- a/sonar-server/src/main/webapp/WEB-INF/app/controllers/api/action_plans_controller.rb +++ b/sonar-server/src/main/webapp/WEB-INF/app/controllers/api/action_plans_controller.rb @@ -54,7 +54,6 @@ class Api::ActionPlansController < Api::ApiController # def create verify_post_request - access_denied unless has_role?(:admin) require_parameters :project, :name result = Internal.issues.createActionPlan(params) @@ -72,7 +71,6 @@ class Api::ActionPlansController < Api::ApiController # def delete verify_post_request - access_denied unless has_role?(:admin) require_parameters :key result = Internal.issues.deleteActionPlan(params[:key]) @@ -97,8 +95,7 @@ class Api::ActionPlansController < Api::ApiController # def update verify_post_request - access_denied unless has_role?(:admin) - require_parameters :key + require_parameters :key, :name result = Internal.issues.updateActionPlan(params[:key], params) render_result(result) @@ -115,7 +112,6 @@ class Api::ActionPlansController < Api::ApiController # def close verify_post_request - access_denied unless has_role?(:admin) require_parameters :key result = Internal.issues.closeActionPlan(params[:key]) @@ -133,7 +129,6 @@ class Api::ActionPlansController < Api::ApiController # def open verify_post_request - access_denied unless has_role?(:admin) require_parameters :key result = Internal.issues.openActionPlan(params[:key]) |