diff options
| author | Marcin Kuzminski <marcin@python-works.com> | 2013-04-15 02:11:06 +0200 |
|---|---|---|
| committer | Marcin Kuzminski <marcin@python-works.com> | 2013-04-15 02:11:06 +0200 |
| commit | 82715da50dad90948f336680cb4f16112b9738b1 (patch) | |
| tree | 7ff93ebf4ec851697d92f4387b8cb42fc7e736af | |
| parent | 0e85081999e9b2a34d50b2b5f0047a265547a2e1 (diff) | |
added missing perms check on history call
| -rw-r--r-- | rhodecode/controllers/files.py | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/rhodecode/controllers/files.py b/rhodecode/controllers/files.py index 61cb5f01..14f35e74 100644 --- a/rhodecode/controllers/files.py +++ b/rhodecode/controllers/files.py @@ -182,6 +182,9 @@ class FilesController(BaseRepoController): return render('files/files.html') + @LoginRequired() + @HasRepoPermissionAnyDecorator('repository.read', 'repository.write', + 'repository.admin') def history(self, repo_name, revision, f_path, annotate=False): if request.environ.get('HTTP_X_PARTIAL_XHR'): c.changeset = self.__get_cs_or_redirect(revision, repo_name) |