Authorize user on note update

doriancmore · Jul 1, 2013 · 1216a62 · 1216a62
1 parent 20b2a0b
commit 1216a62
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/app/controllers/notes_controller.rb b/app/controllers/notes_controller.rb
@@ -2,6 +2,7 @@ class NotesController < ProjectResourceController
   # Authorize
   before_filter :authorize_read_note!
   before_filter :authorize_write_note!, only: [:create]
+  before_filter :authorize_modify_note!, only: [:update]
 
   respond_to :js