projects / arvados.git / commitdiff
summary | shortlog | log | commit | commitdiff | tree
raw | patch | inline | side by side (parent: dffa580)
2764: Fixed scopes_allow_request to use request.request_method (the effective
authorPeter Amstutz <peter.amstutz@curoverse.com>
Tue, 20 May 2014 19:00:42 +0000 (15:00 -0400)
committerBrett Smith <brett@curoverse.com>
Wed, 21 May 2014 19:16:35 +0000 (15:16 -0400)
HTTP method) instead of request.method (the actual HTTP method) because
workbench uses POST even for GET.

services/api/app/models/api_client_authorization.rb patch | blob | history

diff --git a/services/api/app/models/api_client_authorization.rb b/services/api/app/models/api_client_authorization.rb
index 2488d8322fbc97dfb9d3ee3446bf902bf581a9ce..82dd0ec2b6177847f72460b87b492950b66a605a 100644 (file)
--- a/services/api/app/models/api_client_authorization.rb
+++ b/services/api/app/models/api_client_authorization.rb
@@ -71,7 +71,7 @@ class ApiClientAuthorization < ArvadosModel
   end
 
   def scopes_allow_request?(request)
-    scopes_allow? [request.method, request.path].join(' ')
+    scopes_allow? [request.request_method, request.path].join(' ')
   end
 
   def logged_attributes