6476: add comment
authorradhika <radhika@curoverse.com>
Tue, 4 Aug 2015 14:41:44 +0000 (10:41 -0400)
committerradhika <radhika@curoverse.com>
Tue, 4 Aug 2015 14:41:44 +0000 (10:41 -0400)
apps/workbench/app/controllers/actions_controller.rb

index 2a0f74762baed083c63db29fc3a04d54634149a1..58b8cdc54f018e6dae20ba7b9c182bfbaef909c0 100644 (file)
@@ -2,6 +2,8 @@ require "arvados/collection"
 
 class ActionsController < ApplicationController
 
+  # Skip require_thread_api_token if this is a show action
+  # for an object uuid that supports anonymous access.
   skip_around_filter :require_thread_api_token, if: proc { |ctrl|
     Rails.configuration.anonymous_user_token and
     'show' == ctrl.action_name and