diff options
| author | Shinya Maeda <shinya@gitlab.com> | 2019-03-22 19:14:39 +0700 |
|---|---|---|
| committer | Shinya Maeda <shinya@gitlab.com> | 2019-03-26 20:56:04 +0700 |
| commit | bdee9e8412dc9fe4925031cb06070de0fb134de3 (patch) | |
| tree | 0a165405c8d43301a83f28b231dc3b34655b78d3 /app | |
| parent | 61b2f70fdcbc8dce7504c6599f57e2db703cc5ae (diff) | |
| download | gitlab-ce-bdee9e8412dc9fe4925031cb06070de0fb134de3.tar.gz | |
Disallow guest users from accessing Releases
As they do not have a permission to read git tag
Diffstat (limited to 'app')
| -rw-r--r-- | app/policies/project_policy.rb | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/app/policies/project_policy.rb b/app/policies/project_policy.rb index 9f9f5230040..e9f4e0b4b41 100644 --- a/app/policies/project_policy.rb +++ b/app/policies/project_policy.rb @@ -177,7 +177,6 @@ class ProjectPolicy < BasePolicy enable :read_cycle_analytics enable :award_emoji enable :read_pages_content - enable :read_release end # These abilities are not allowed to admins that are not members of the project, @@ -203,6 +202,7 @@ class ProjectPolicy < BasePolicy enable :read_deployment enable :read_merge_request enable :read_sentry_issue + enable :read_release end # We define `:public_user_access` separately because there are cases in gitlab-ee |