FIX repo setting api for forbidden

2021-02-09 11:48:05 +08:00 · 2021-02-09 11:48:05 +08:00 · 9f4c2bd673
parent 8e4d6c7064
commit 9f4c2bd673
1 changed files with 1 additions and 0 deletions
--- a/app/controllers/repositories_controller.rb
+++ b/app/controllers/repositories_controller.rb
@ -88,6 +88,7 @@ class RepositoriesController < ApplicationController
  end

  def edit
+    return render_forbidden if !@project.manager?(current_user)
  end

  def create_file