From 09a808162da155cf9c1e572e01c2c0843d44598e Mon Sep 17 00:00:00 2001 From: Ryan Lue Date: Wed, 27 May 2020 17:21:45 +0800 Subject: [PATCH] Bugfix: Add missing authorization check for tickets#create --- app/controllers/tickets_controller.rb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/app/controllers/tickets_controller.rb b/app/controllers/tickets_controller.rb index 4e814acaf..d7e02f84b 100644 --- a/app/controllers/tickets_controller.rb +++ b/app/controllers/tickets_controller.rb @@ -6,7 +6,7 @@ class TicketsController < ApplicationController include ChecksUserAttributesByCurrentUserPermission include TicketStats - prepend_before_action -> { authorize! }, only: %i[selector import_example import_start] + prepend_before_action -> { authorize! }, only: %i[create selector import_example import_start] prepend_before_action :authentication_check # GET /api/v1/tickets