# HG changeset patch # User Marcin Kuzminski # Date 1342475267 -7200 # Node ID 6bd62617b99f317323da95f490b41cbffc8b5626 # Parent 4abce2c11c5f324f1ca9177b126b03a4dd58672d Opening pull request shouldn't be accessible by anonymous users diff -r 4abce2c11c5f -r 6bd62617b99f rhodecode/controllers/pullrequests.py --- a/rhodecode/controllers/pullrequests.py Mon Jul 16 23:44:50 2012 +0200 +++ b/rhodecode/controllers/pullrequests.py Mon Jul 16 23:47:47 2012 +0200 @@ -84,6 +84,7 @@ c.repo_name = repo_name return render('/pullrequests/pullrequest_show_all.html') + @NotAnonymous() def index(self): org_repo = c.rhodecode_db_repo @@ -281,6 +282,7 @@ c.target_repo = c.pull_request.org_repo.repo_name return render('/pullrequests/pullrequest_show.html') + @NotAnonymous() @jsonify def comment(self, repo_name, pull_request_id): pull_request = PullRequest.get_or_404(pull_request_id) @@ -337,6 +339,7 @@ return data + @NotAnonymous() @jsonify def delete_comment(self, repo_name, comment_id): co = ChangesetComment.get(comment_id)