Added authorization for API show activity endpoint

10 years ago · 40d01022fb
parent 8cd143eaed
commit 40d01022fb
1 changed files with 1 additions and 0 deletions
--- a/lib/api/v3/activities/activities_api.rb
+++ b/lib/api/v3/activities/activities_api.rb
@ -17,6 +17,7 @@ module API
            end

            get do
+              authorize(:work_packages, :show, context: @activity.Journalable.project)
              @representer.to_json
            end