[#50519] Project storage members page can be accessed without a session.

https://community.openproject.org/work_packages/50519

modules/storages/app/controllers/storages/project_settings/project_storage_members_controller.rb

@@ -29,7 +29,7 @@
 # Purpose: Let OpenProject create folders per project automatically.
 # This is recommended as it ensures that every team member always has the correct access permissions.
 #
-class Storages::ProjectSettings::ProjectStorageMembersController < ApplicationController
+class Storages::ProjectSettings::ProjectStorageMembersController < Projects::SettingsController
   include PaginationHelper
 
   menu_item :settings_project_storages
@@ -61,6 +61,5 @@ def find_model_object(object_id = :project_storage_id)
     super(object_id)
     @project_storage = @object
     @storage = @project_storage.storage
-    @project = @project_storage.project
   end
 end

modules/storages/spec/features/view_project_storage_members_spec.rb

@@ -46,6 +46,13 @@
                                                  connected_no_permissions_user])
   end
 
+  it 'cannot be accessed without being logged in' do
+    visit project_settings_project_storage_members_path(project, project_storage_id: project_storage.id)
+
+    expect(page).to have_title('Sign in | OpenProject')
+    expect(page).not_to have_text('Members connection status')
+  end
+
   it 'lists project members connection statuses' do
     login_as user