From 480ff1d18eac5e1eef38df532d7dc671414ecc5e Mon Sep 17 00:00:00 2001
From: Robert
Date: Thu, 14 Sep 2017 16:06:53 +0200
Subject: Fixes: #4442@0.5h;

---
 app/policies/api_key_policy.rb | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'app/policies/api_key_policy.rb')

diff --git a/app/policies/api_key_policy.rb b/app/policies/api_key_policy.rb
index bc5c9e433..7b4c22e33 100644
--- a/app/policies/api_key_policy.rb
+++ b/app/policies/api_key_policy.rb
@@ -10,7 +10,7 @@ class ApiKeyPolicy < ApplicationPolicy
   end
 
   def create?
-    user.has_permission?('api_keys.create')
+    organisation_match? && user.has_permission?('api_keys.create')
   end
 
   def update?
-- 
cgit v1.2.3