view db/migrate/025_add_search_permission.rb @ 799:9f2bc483b7ec feature_14

Fixes the html injection problem in the client side (Bug #341).

class AddSearchPermission < ActiveRecord::Migration
  # model removed
  class Permission < ActiveRecord::Base; end

  def self.up
    Permission.create :controller => "projects", :action => "search", :description => "label_search", :sort => 130, :is_public => true, :mail_option => 0, :mail_enabled => 0
  end

  def self.down
    Permission.find_by_controller_and_action('projects', 'search').destroy
  end
end