diff options
| author | GitLab Release Tools Bot <delivery-team+release-tools@gitlab.com> | 2023-03-30 20:51:15 +0000 |
|---|---|---|
| committer | GitLab Release Tools Bot <delivery-team+release-tools@gitlab.com> | 2023-03-30 20:51:15 +0000 |
| commit | f4653343ad8475d1d72a55de4face443cc7f66c2 (patch) | |
| tree | c9c9ebb914be91d9c5996f708721110276a38be1 /app/services/merge_requests/push_options_handler_service.rb | |
| parent | 096459e2c2c8e3c17eb6e677091990adffe9af7d (diff) | |
| parent | a2b7634113a2b2f3b9aad86b1a98c52c380e5e76 (diff) | |
| download | gitlab-ce-f4653343ad8475d1d72a55de4face443cc7f66c2.tar.gz | |
Merge remote-tracking branch 'dev/15-10-stable' into 15-10-stable
Diffstat (limited to 'app/services/merge_requests/push_options_handler_service.rb')
| -rw-r--r-- | app/services/merge_requests/push_options_handler_service.rb | 10 |
1 files changed, 9 insertions, 1 deletions
diff --git a/app/services/merge_requests/push_options_handler_service.rb b/app/services/merge_requests/push_options_handler_service.rb index 235dc6678df..e9abafceb13 100644 --- a/app/services/merge_requests/push_options_handler_service.rb +++ b/app/services/merge_requests/push_options_handler_service.rb @@ -54,7 +54,15 @@ module MergeRequests end def validate_service - errors << 'User is required' if current_user.nil? + if current_user.nil? + errors << 'User is required' + return + end + + unless current_user&.can?(:read_code, target_project) + errors << 'User access was denied' + return + end unless target_project.merge_requests_enabled? errors << "Merge requests are not enabled for project #{target_project.full_path}" |