From e97153578ca75280ea2b94b0a02cec84a3c02b46 Mon Sep 17 00:00:00 2001 From: Dmitriy Zaporozhets Date: Tue, 3 Mar 2015 22:15:38 -0800 Subject: [PATCH] Add appearance to allowed upload mounts --- app/controllers/uploads_controller.rb | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/app/controllers/uploads_controller.rb b/app/controllers/uploads_controller.rb index 906feb14ca..5fb763aab9 100644 --- a/app/controllers/uploads_controller.rb +++ b/app/controllers/uploads_controller.rb @@ -29,7 +29,7 @@ class UploadsController < ApplicationController private def authorize_access - unless params[:mounted_as] == 'avatar' || params[:mounted_as] == 'light_logo' || params[:mounted_as] == 'logo' + unless %w(avatar logo light_logo).include?(params[:mounted_as]) authenticate_user! && reject_blocked! end end @@ -39,14 +39,15 @@ class UploadsController < ApplicationController user: User, project: Project, note: Note, - group: Group + group: Group, + appearance: Appearance } upload_models[params[:model].to_sym] end def upload_mount - upload_mounts = %w(avatar attachment file) + upload_mounts = %w(avatar attachment file logo light_logo) if upload_mounts.include?(params[:mounted_as]) params[:mounted_as]