From e1b704bdac4a7519d2cd26089ce4adc9d68c80c8 Mon Sep 17 00:00:00 2001
From: jakedt <jake@devtable.com>
Date: Tue, 18 Mar 2014 14:45:14 -0400
Subject: [PATCH] We must check repository permissions before parsing args.

---
 endpoints/api/trigger.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/endpoints/api/trigger.py b/endpoints/api/trigger.py
index 2a56064b8..8ba91463b 100644
--- a/endpoints/api/trigger.py
+++ b/endpoints/api/trigger.py
@@ -226,9 +226,9 @@ class ActivateBuildTrigger(RepositoryParamResource):
 @resource('/v1/repository/<path:repository>/trigger/<trigger_uuid>/builds')
 class TriggerBuildList(RepositoryParamResource):
   """ Resource to represent builds that were activated from the specified trigger. """
+  @require_repo_admin
   @parse_args
   @query_param('limit', 'The maximum number of builds to return', type=int, default=5)
-  @require_repo_admin
   @nickname('listTriggerRecentBuilds')
   def get(self, args, namespace, repository, trigger_uuid):
     """ List the builds started by the specified trigger. """