permission check in queries controller

git-svn-id: http://redmine.rubyforge.org/svn/branches/work@89 e93f8b46-1217-0410-a6f0-8f06a7374b81

queries/trunk/app/controllers/queries_controller.rb

@@ -43,5 +43,7 @@ private
   def find_query
     @query = Query.find(params[:id])
     @project = @query.project
+    # check if user is allowed to manage queries (same permission as add_query)
+    authorize('projects', 'add_query')
   end
 end