diff app/helpers/queries_helper.rb @ 507:0c939c159af4 redmine-1.2

Update to Redmine 1.2.1 on 1.2-stable branch (Redmine SVN rev 6270)

--- a/app/helpers/queries_helper.rb	Mon Jun 06 14:24:13 2011 +0100
+++ b/app/helpers/queries_helper.rb	Thu Jul 14 10:32:19 2011 +0100
@@ -70,6 +70,7 @@
       cond = "project_id IS NULL"
       cond << " OR project_id = #{@project.id}" if @project
       @query = Query.find(params[:query_id], :conditions => cond)
+      raise ::Unauthorized unless @query.visible?
       @query.project = @project
       session[:query] = {:id => @query.id, :project_id => @query.project_id}
       sort_clear