summaryrefslogtreecommitdiff
path: root/app/policies
diff options
context:
space:
mode:
authorValery Sizov <valery@gitlab.com>2016-10-04 15:52:08 +0300
committerValery Sizov <valery@gitlab.com>2016-10-11 16:51:26 +0300
commitb4004488f76d7360acd2f38277d617447c76b888 (patch)
treed52552cccf8b51ba4e099f0afbb05bf94a1a1472 /app/policies
parenta3169d522a0db269770141a1b30c3df5acee82f3 (diff)
downloadgitlab-ce-b4004488f76d7360acd2f38277d617447c76b888.tar.gz
Make guests unable to view MRsguests_cant_see_mrs
Diffstat (limited to 'app/policies')
-rw-r--r--app/policies/project_policy.rb3
1 files changed, 2 insertions, 1 deletions
diff --git a/app/policies/project_policy.rb b/app/policies/project_policy.rb
index a806cf83782..be4721d7a51 100644
--- a/app/policies/project_policy.rb
+++ b/app/policies/project_policy.rb
@@ -40,7 +40,6 @@ class ProjectPolicy < BasePolicy
can! :read_milestone
can! :read_project_snippet
can! :read_project_member
- can! :read_merge_request
can! :read_note
can! :create_project
can! :create_issue
@@ -63,6 +62,7 @@ class ProjectPolicy < BasePolicy
can! :read_pipeline
can! :read_environment
can! :read_deployment
+ can! :read_merge_request
end
# Permissions given when an user is team member of a project
@@ -117,6 +117,7 @@ class ProjectPolicy < BasePolicy
can! :read_container_image
can! :build_download_code
can! :build_read_container_image
+ can! :read_merge_request
end
def owner_access!