From c20f99d2106b0377292c7b8b8b1e87368bfa8b7e Mon Sep 17 00:00:00 2001 From: carlad Date: Thu, 19 Nov 2015 19:07:24 +0100 Subject: [PATCH] add check_access to repo for un/star services --- lib/travis/api/v3/services/repository/star.rb | 7 ++++--- lib/travis/api/v3/services/repository/unstar.rb | 7 ++++--- 2 files changed, 8 insertions(+), 6 deletions(-) diff --git a/lib/travis/api/v3/services/repository/star.rb b/lib/travis/api/v3/services/repository/star.rb index c0dc7075..79b34835 100644 --- a/lib/travis/api/v3/services/repository/star.rb +++ b/lib/travis/api/v3/services/repository/star.rb @@ -3,12 +3,13 @@ module Travis::API::V3 def run! raise LoginRequired unless access_control.logged_in? or access_control.full_access? raise NotFound unless repository = find(:repository) + check_access(repository) current_user = access_control.user query.star(repository, current_user) end - # def check_access(repository) - # access_control.permissions(repository).star! - # end + def check_access(repository) + access_control.permissions(repository).star! + end end end diff --git a/lib/travis/api/v3/services/repository/unstar.rb b/lib/travis/api/v3/services/repository/unstar.rb index 8da61ffe..8d33050c 100644 --- a/lib/travis/api/v3/services/repository/unstar.rb +++ b/lib/travis/api/v3/services/repository/unstar.rb @@ -3,12 +3,13 @@ module Travis::API::V3 def run! raise LoginRequired unless access_control.logged_in? or access_control.full_access? raise NotFound unless repository = find(:repository) + check_access(repository) current_user = access_control.user query.unstar(repository, current_user) end - # def check_access(repository) - # access_control.permissions(repository).unstar! - # end + def check_access(repository) + access_control.permissions(repository).unstar! + end end end