changeset 2627:6bd62617b99f beta

Opening pull request shouldn't be accessible by anonymous users
author Marcin Kuzminski <marcin@python-works.com>
date Mon, 16 Jul 2012 23:47:47 +0200
parents 4abce2c11c5f
children 4548912f48c8
files rhodecode/controllers/pullrequests.py
diffstat 1 files changed, 3 insertions(+), 0 deletions(-) [+]
line wrap: on
line diff
--- a/rhodecode/controllers/pullrequests.py	Mon Jul 16 23:44:50 2012 +0200
+++ b/rhodecode/controllers/pullrequests.py	Mon Jul 16 23:47:47 2012 +0200
@@ -84,6 +84,7 @@
         c.repo_name = repo_name
         return render('/pullrequests/pullrequest_show_all.html')
 
+    @NotAnonymous()
     def index(self):
         org_repo = c.rhodecode_db_repo
 
@@ -281,6 +282,7 @@
         c.target_repo = c.pull_request.org_repo.repo_name
         return render('/pullrequests/pullrequest_show.html')
 
+    @NotAnonymous()
     @jsonify
     def comment(self, repo_name, pull_request_id):
         pull_request = PullRequest.get_or_404(pull_request_id)
@@ -337,6 +339,7 @@
 
         return data
 
+    @NotAnonymous()
     @jsonify
     def delete_comment(self, repo_name, comment_id):
         co = ChangesetComment.get(comment_id)