Creating time tracking entry for other user through rest API fails with 403 (#32774).

Patch by Marius BALTEANU.

git-svn-id: http://svn.redmine.org/redmine/trunk@19669 e93f8b46-1217-0410-a6f0-8f06a7374b81
This commit is contained in:
Jean-Philippe Lang
2020-04-05 14:23:40 +00:00
parent 9b5cccff39
commit ba27fe1b4e
2 changed files with 29 additions and 0 deletions

View File

@@ -288,6 +288,14 @@ class TimelogController < ApplicationController
end
end
def find_optional_project
if params[:project_id].present? || params[:time_entry].present? && params[:time_entry][:project_id].present?
project_id = params[:project_id] || params[:time_entry][:project_id]
find_project(project_id)
end
authorize_global
end
# Returns the TimeEntry scope for index and report actions
def time_entry_scope(options={})
@query.results_scope(options)