# HG changeset patch
# User Marcin Kuzminski <marcin@python-works.com>
# Date 2012-07-16 21:47:47
# Node ID 6bd62617b99f317323da95f490b41cbffc8b5626
# Parent  4abce2c11c5f324f1ca9177b126b03a4dd58672d

Opening pull request shouldn't be accessible by anonymous users

diff --git a/rhodecode/controllers/pullrequests.py b/rhodecode/controllers/pullrequests.py
--- a/rhodecode/controllers/pullrequests.py
+++ b/rhodecode/controllers/pullrequests.py
@@ -84,6 +84,7 @@ class PullrequestsController(BaseRepoCon
         c.repo_name = repo_name
         return render('/pullrequests/pullrequest_show_all.html')
 
+    @NotAnonymous()
     def index(self):
         org_repo = c.rhodecode_db_repo
 
@@ -281,6 +282,7 @@ class PullrequestsController(BaseRepoCon
         c.target_repo = c.pull_request.org_repo.repo_name
         return render('/pullrequests/pullrequest_show.html')
 
+    @NotAnonymous()
     @jsonify
     def comment(self, repo_name, pull_request_id):
         pull_request = PullRequest.get_or_404(pull_request_id)
@@ -337,6 +339,7 @@ class PullrequestsController(BaseRepoCon
 
         return data
 
+    @NotAnonymous()
     @jsonify
     def delete_comment(self, repo_name, comment_id):
         co = ChangesetComment.get(comment_id)