From 63ae3fdea091490fb21468e6e5929f7d960f687e Mon Sep 17 00:00:00 2001 From: Jasder <2053003901@@qq.com> Date: Fri, 9 Oct 2020 11:40:20 +0800 Subject: [PATCH] FIX project about page for authoration --- app/controllers/projects_controller.rb | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/app/controllers/projects_controller.rb b/app/controllers/projects_controller.rb index f861ce4db..253622440 100644 --- a/app/controllers/projects_controller.rb +++ b/app/controllers/projects_controller.rb @@ -2,7 +2,7 @@ class ProjectsController < ApplicationController include ApplicationHelper include OperateProjectAbilityAble include ProjectsHelper - before_action :require_login, except: %i[index branches group_type_list simple show fork_users praise_users watch_users recommend] + before_action :require_login, except: %i[index branches group_type_list simple show fork_users praise_users watch_users recommend about] before_action :load_project, except: %i[index group_type_list migrate create recommend] before_action :authorizate_user_can_edit_project!, only: %i[update] before_action :project_public?, only: %i[fork_users praise_users watch_users] @@ -112,6 +112,7 @@ class ProjectsController < ApplicationController @attachments = Array(@project_detail&.attachments) if request.get? ActiveRecord::Base.transaction do if request.post? + require_login authorizate_user_can_edit_project! unless @project_detail.present? @project_detail = ProjectDetail.new(