use subject scope in :id/users

since we're loading all the members anyways

use subject scope in :id/users
since we're loading all the members anyways
291fa9e9 · http://jneen.net/ · 366adac5 · 291fa9e9
Commit 291fa9e9 authored Apr 11, 2017 by http://jneen.net/
Hide whitespace changes
Inline Side-by-side

Showing with 3 additions and 1 deletion

lib/api/projects.rb lib/api/projects.rb +3 -1

No files found.
--- a/lib/api/projects.rb
+++ b/lib/api/projects.rb
+require 'declarative_policy'
+
 module API
  # Projects API
  class Projects < Grape::API
@@ -408,7 +410,7 @@ module API
        use :pagination
      end
      get ':id/users' do
-        users = user_project.team.users
+        users = DeclarativePolicy.subject_scope { user_project.team.users }
        users = users.search(params[:search]) if params[:search].present?

        present paginate(users), with: Entities::UserBasic