Merge pull request #1575 from opf/feature/api-activities-show-permissions

Added authorization for API show activity endpoint
10 years ago · 70a3d37090
parent 1f7fbd7c56 40d01022fb
commit 70a3d37090
1 changed files with 1 additions and 0 deletions
--- a/lib/api/v3/activities/activities_api.rb
+++ b/lib/api/v3/activities/activities_api.rb
@ -17,6 +17,7 @@ module API
            end

            get do
+              authorize(:work_packages, :show, context: @activity.Journalable.project)
              @representer.to_json
            end