Move pipeline auth above pipeline assignment

ccc227e6 · Matija Čupić · 89b856e7 · ccc227e6
Commit ccc227e6 authored Dec 20, 2018 by Matija Čupić
Hide whitespace changes
Inline Side-by-side

Showing with 1 addition and 1 deletion

lib/api/jobs.rb lib/api/jobs.rb +1 -1

No files found.
--- a/lib/api/jobs.rb
+++ b/lib/api/jobs.rb
@@ -58,8 +58,8 @@ module API
      end
      # rubocop: disable CodeReuse/ActiveRecord
      get ':id/pipelines/:pipeline_id/jobs' do
-        pipeline = user_project.ci_pipelines.find(params[:pipeline_id])
        authorize!(:read_pipeline, user_project)
+        pipeline = user_project.ci_pipelines.find(params[:pipeline_id])
        authorize!(:read_build, pipeline)

        builds = pipeline.builds