Insert notification settings dropdown into groups

1 files changed, 20 insertions, 2 deletions

diff --git a/app/controllers/notification_settings_controller.rb b/app/controllers/notification_settings_controller.rb
index 5d425ad8420..735e562a497 100644
--- a/app/controllers/notification_settings_controller.rb
+++ b/app/controllers/notification_settings_controller.rb
@@ -2,9 +2,11 @@ class NotificationSettingsController < ApplicationController
   before_action :authenticate_user!
 
   def create
-    project = current_user.projects.find(params[:project][:id])
+    resource = find_resource
 
-    @notification_setting = current_user.notification_settings_for(project)
+    return render_404 unless can_read?(resource)
+
+    @notification_setting = current_user.notification_settings_for(resource)
     @saved = @notification_setting.update_attributes(notification_setting_params)
 
     render_response
@@ -19,6 +21,22 @@ class NotificationSettingsController < ApplicationController
 
   private
 
+  def find_resource
+    resource =
+      if params[:project].present?
+        Project.find(params[:project][:id])
+      elsif params[:namespace].present?
+        Group.find(params[:namespace][:id])
+      end
+  end
+
+  def can_read?(resource)
+    ability_name = resource.class.name.downcase
+    ability_name = "read_#{ability_name}".to_sym
+
+    can?(current_user, ability_name, resource)
+  end
+
   def render_response
     render json: {
       html: view_to_html_string("notifications/buttons/_notifications", notification_setting: @notification_setting),