summaryrefslogtreecommitdiff
path: root/app/policies/group_policy.rb
diff options
context:
space:
mode:
authorThong Kuah <tkuah@gitlab.com>2018-10-15 13:42:02 +1300
committerThong Kuah <tkuah@gitlab.com>2018-11-08 23:14:06 +1300
commitdcf0caaa0656b421b5a80e45c4a3e14785cb269a (patch)
treeb7c07925bfcef146a8e1169dbcc0db837b1e3c13 /app/policies/group_policy.rb
parentdf8f663689aba29424406ebf2a9e786fb6dcdd14 (diff)
downloadgitlab-ce-dcf0caaa0656b421b5a80e45c4a3e14785cb269a.tar.gz
Add policy for clusters on group level
- maintainer for group can read, create, update, and admin cluster - project user, at any level, cannot do anything with group cluster
Diffstat (limited to 'app/policies/group_policy.rb')
-rw-r--r--app/policies/group_policy.rb4
1 files changed, 4 insertions, 0 deletions
diff --git a/app/policies/group_policy.rb b/app/policies/group_policy.rb
index 73c93b22c95..6b4e56ef5e4 100644
--- a/app/policies/group_policy.rb
+++ b/app/policies/group_policy.rb
@@ -65,6 +65,10 @@ class GroupPolicy < BasePolicy
enable :create_projects
enable :admin_pipeline
enable :admin_build
+ enable :read_cluster
+ enable :create_cluster
+ enable :update_cluster
+ enable :admin_cluster
end
rule { owner }.policy do