diff options
| author | Rémy Coutable <remy@rymai.me> | 2016-08-09 17:51:40 +0200 |
|---|---|---|
| committer | Rémy Coutable <remy@rymai.me> | 2016-08-13 00:06:11 +0200 |
| commit | a54fdc384fee9daeab1b9fb638dae5dce4e4be15 (patch) | |
| tree | faa881a6d0bfcb490f6c6655de9967265f1d3083 /app/services/merge_requests/reopen_service.rb | |
| parent | 0eea8c885743575b0e93a98846b3663e9903aa66 (diff) | |
| download | gitlab-ce-a54fdc384fee9daeab1b9fb638dae5dce4e4be15.tar.gz | |
Enforce permissions in `{Issues,MergeRequests}::{Close,Reopen}Service`
Signed-off-by: Rémy Coutable <remy@rymai.me>
Diffstat (limited to 'app/services/merge_requests/reopen_service.rb')
| -rw-r--r-- | app/services/merge_requests/reopen_service.rb | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/app/services/merge_requests/reopen_service.rb b/app/services/merge_requests/reopen_service.rb index eb88ae9d11c..fadcce5d9b6 100644 --- a/app/services/merge_requests/reopen_service.rb +++ b/app/services/merge_requests/reopen_service.rb @@ -1,6 +1,8 @@ module MergeRequests class ReopenService < MergeRequests::BaseService def execute(merge_request) + return merge_request unless can?(current_user, :update_merge_request, merge_request) + if merge_request.reopen event_service.reopen_mr(merge_request, current_user) create_note(merge_request) |