diff options
| author | GitLab Bot <gitlab-bot@gitlab.com> | 2023-01-06 22:28:28 +0000 |
|---|---|---|
| committer | GitLab Bot <gitlab-bot@gitlab.com> | 2023-01-06 22:28:28 +0000 |
| commit | e4a92d342784ccbb929e7d2b1faa42d6c2f591a3 (patch) | |
| tree | 0e850cae1809a9224f5dcd773933777dbd4c17de /app/policies/project_policy.rb | |
| parent | 89e372068b3909b0e8cfb03af4da176357a1abbc (diff) | |
| download | gitlab-ce-e4a92d342784ccbb929e7d2b1faa42d6c2f591a3.tar.gz | |
Add latest changes from gitlab-org/security/gitlab@15-7-stable-ee
Diffstat (limited to 'app/policies/project_policy.rb')
| -rw-r--r-- | app/policies/project_policy.rb | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/app/policies/project_policy.rb b/app/policies/project_policy.rb index 7f67e80e432..2a13fafa313 100644 --- a/app/policies/project_policy.rb +++ b/app/policies/project_policy.rb @@ -308,6 +308,8 @@ class ProjectPolicy < BasePolicy rule { guest & can?(:download_code) }.enable :build_download_code rule { guest & can?(:read_container_image) }.enable :build_read_container_image + rule { guest & ~public_project }.enable :read_grafana + rule { can?(:reporter_access) }.policy do enable :admin_issue_board enable :download_code @@ -340,6 +342,7 @@ class ProjectPolicy < BasePolicy enable :read_package enable :read_product_analytics enable :read_ci_cd_analytics + enable :read_grafana end # We define `:public_user_access` separately because there are cases in gitlab-ee |