diff options
author | Oswaldo Ferreira <oswaldo@gitlab.com> | 2019-01-09 17:24:05 -0200 |
---|---|---|
committer | Yorick Peterse <yorickpeterse@gmail.com> | 2019-01-31 16:51:16 +0100 |
commit | 68d13322290a52360cd485d24bcfff995d98cf97 (patch) | |
tree | 0b3e69056d84097632ebfb017b4920381da4c437 /app/policies | |
parent | a3cde02651af6e18fd91416ac1378aaed36ed115 (diff) | |
download | gitlab-ce-68d13322290a52360cd485d24bcfff995d98cf97.tar.gz |
Don't process MR refs for guests in the notes
Diffstat (limited to 'app/policies')
-rw-r--r-- | app/policies/project_policy.rb | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/app/policies/project_policy.rb b/app/policies/project_policy.rb index 12f9f29dcc1..d90bb647018 100644 --- a/app/policies/project_policy.rb +++ b/app/policies/project_policy.rb @@ -393,7 +393,7 @@ class ProjectPolicy < BasePolicy end.enable :read_issue_iid rule do - (can?(:read_project_for_iids) & merge_requests_visible_to_user) | can?(:read_merge_request) + (~guest & can?(:read_project_for_iids) & merge_requests_visible_to_user) | can?(:read_merge_request) end.enable :read_merge_request_iid rule { ~can_have_multiple_clusters & has_clusters }.prevent :add_cluster |