From 390eb7849ca9c5578173656b8345b641f59fda44 Mon Sep 17 00:00:00 2001 From: Jean-Philippe Lang Date: Sun, 11 Apr 2010 15:21:08 +0000 Subject: [PATCH] Merged r3611 from trunk. git-svn-id: svn+ssh://rubyforge.org/var/svn/redmine/branches/0.9-stable@3660 e93f8b46-1217-0410-a6f0-8f06a7374b81 --- app/controllers/queries_controller.rb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/app/controllers/queries_controller.rb b/app/controllers/queries_controller.rb index 16755a125..599060e69 100644 --- a/app/controllers/queries_controller.rb +++ b/app/controllers/queries_controller.rb @@ -74,7 +74,7 @@ private def find_optional_project @project = Project.find(params[:project_id]) if params[:project_id] - User.current.allowed_to?(:save_queries, @project, :global => true) + render_403 unless User.current.allowed_to?(:save_queries, @project, :global => true) rescue ActiveRecord::RecordNotFound render_404 end