diff options
author | GitLab Bot <gitlab-bot@gitlab.com> | 2023-05-01 12:17:48 +0000 |
---|---|---|
committer | GitLab Bot <gitlab-bot@gitlab.com> | 2023-05-01 12:17:48 +0000 |
commit | cbce607eef01db76e6923ce684aa31af248c004d (patch) | |
tree | 172e75a56c6ec5d2c6bc61eb545d712d971b489b /app/services/projects/create_service.rb | |
parent | d27481e8f3dd252b543f65cb56a98eeb00de855f (diff) | |
download | gitlab-ce-cbce607eef01db76e6923ce684aa31af248c004d.tar.gz |
Add latest changes from gitlab-org/security/gitlab@15-11-stable-ee
Diffstat (limited to 'app/services/projects/create_service.rb')
-rw-r--r-- | app/services/projects/create_service.rb | 8 |
1 files changed, 8 insertions, 0 deletions
diff --git a/app/services/projects/create_service.rb b/app/services/projects/create_service.rb index cbea44d6aff..63b050faf9c 100644 --- a/app/services/projects/create_service.rb +++ b/app/services/projects/create_service.rb @@ -58,6 +58,7 @@ module Projects return @project if @project.errors.any? validate_create_permissions + validate_import_permissions return @project if @project.errors.any? @relations_block&.call(@project) @@ -98,6 +99,13 @@ module Projects @project.errors.add(:namespace, "is not valid") end + def validate_import_permissions + return unless @project.import? + return if current_user.can?(:import_projects, parent_namespace) + + @project.errors.add(:user, 'is not allowed to import projects') + end + def after_create_actions log_info("#{current_user.name} created a new project \"#{@project.full_name}\"") |