summaryrefslogtreecommitdiff
path: root/app/policies/personal_access_token_policy.rb
diff options
context:
space:
mode:
authorGitLab Bot <gitlab-bot@gitlab.com>2020-08-20 18:42:06 +0000
committerGitLab Bot <gitlab-bot@gitlab.com>2020-08-20 18:42:06 +0000
commit6e4e1050d9dba2b7b2523fdd1768823ab85feef4 (patch)
tree78be5963ec075d80116a932011d695dd33910b4e /app/policies/personal_access_token_policy.rb
parent1ce776de4ae122aba3f349c02c17cebeaa8ecf07 (diff)
downloadgitlab-ce-6e4e1050d9dba2b7b2523fdd1768823ab85feef4.tar.gz
Add latest changes from gitlab-org/gitlab@13-3-stable-ee
Diffstat (limited to 'app/policies/personal_access_token_policy.rb')
-rw-r--r--app/policies/personal_access_token_policy.rb10
1 files changed, 10 insertions, 0 deletions
diff --git a/app/policies/personal_access_token_policy.rb b/app/policies/personal_access_token_policy.rb
new file mode 100644
index 00000000000..1e5404b7822
--- /dev/null
+++ b/app/policies/personal_access_token_policy.rb
@@ -0,0 +1,10 @@
+# frozen_string_literal: true
+
+class PersonalAccessTokenPolicy < BasePolicy
+ condition(:is_owner) { user && subject.user_id == user.id }
+
+ rule { (is_owner | admin) & ~blocked }.policy do
+ enable :read_token
+ enable :revoke_token
+ end
+end