From 390eb7849ca9c5578173656b8345b641f59fda44 2010-04-11 15:21:08
From: Jean-Philippe Lang <jp_lang@yahoo.fr>
Date: 2010-04-11 15:21:08
Subject: [PATCH] Merged r3611 from trunk.

git-svn-id: svn+ssh://rubyforge.org/var/svn/redmine/branches/0.9-stable@3660 e93f8b46-1217-0410-a6f0-8f06a7374b81

---

diff --git a/app/controllers/queries_controller.rb b/app/controllers/queries_controller.rb
index 16755a1..599060e 100644
--- a/app/controllers/queries_controller.rb
+++ b/app/controllers/queries_controller.rb
@@ -74,7 +74,7 @@ private
   
   def find_optional_project
     @project = Project.find(params[:project_id]) if params[:project_id]
-    User.current.allowed_to?(:save_queries, @project, :global => true)
+    render_403 unless User.current.allowed_to?(:save_queries, @project, :global => true)
   rescue ActiveRecord::RecordNotFound
     render_404
   end