summaryrefslogtreecommitdiff
path: root/app/views
diff options
context:
space:
mode:
authorConnor Shea <connor.james.shea@gmail.com>2016-06-10 10:49:12 -0600
committerConnor Shea <connor.james.shea@gmail.com>2016-06-10 10:49:12 -0600
commit358404687fd4981a57d434f0edaa36336d2befd4 (patch)
treee83d3bc14da9321764d5179fccc5b98ce6dabbde /app/views
parent1381b4f42b3caa3ff39264cce8042339c93c4d47 (diff)
downloadgitlab-ce-358404687fd4981a57d434f0edaa36336d2befd4.tar.gz
Fix a bug that allowed Guests to still see Settings links they couldn't access.
Diffstat (limited to 'app/views')
-rw-r--r--app/views/layouts/nav/_project_settings.html.haml3
1 files changed, 2 insertions, 1 deletions
diff --git a/app/views/layouts/nav/_project_settings.html.haml b/app/views/layouts/nav/_project_settings.html.haml
index 459502d7140..d26f89bdf17 100644
--- a/app/views/layouts/nav/_project_settings.html.haml
+++ b/app/views/layouts/nav/_project_settings.html.haml
@@ -1,10 +1,11 @@
- access = user_max_access_in_project(current_user.id, @project)
+- can_edit = can?(current_user, :admin_project, @project)
- if project_nav_tab? :team
= nav_link(controller: [:project_members, :teams]) do
= link_to namespace_project_project_members_path(@project.namespace, @project), title: 'Members', class: 'team-tab tab' do
%span
Members
-- if access
+- if access && can_edit
- if @project.allowed_to_share_with_group?
= nav_link(controller: :group_links) do
= link_to namespace_project_group_links_path(@project.namespace, @project), title: "Groups" do