summaryrefslogtreecommitdiff
path: root/app
diff options
context:
space:
mode:
authorAlexandru Croitor <acroitor@gitlab.com>2019-09-06 21:46:51 +0300
committerAlexandru Croitor <acroitor@gitlab.com>2019-09-20 10:41:20 +0300
commitded9647d12a279b9cadbc3a5974d5c519279d86c (patch)
tree37fced6b14ea88f3f44aeb2f1eb72a0baac1ba71 /app
parent39381519f294742e4083dfd6a50c0c8ceddecd5d (diff)
downloadgitlab-ce-ded9647d12a279b9cadbc3a5974d5c519279d86c.tar.gz
Display only participants that user has permission to see
Diffstat (limited to 'app')
-rw-r--r--app/controllers/concerns/milestone_actions.rb2
1 files changed, 1 insertions, 1 deletions
diff --git a/app/controllers/concerns/milestone_actions.rb b/app/controllers/concerns/milestone_actions.rb
index 8b8b7db72f8..1ead631663e 100644
--- a/app/controllers/concerns/milestone_actions.rb
+++ b/app/controllers/concerns/milestone_actions.rb
@@ -20,7 +20,7 @@ module MilestoneActions
format.html { redirect_to milestone_redirect_path }
format.json do
render json: tabs_json("shared/milestones/_participants_tab", {
- users: @milestone.participants # rubocop:disable Gitlab/ModuleWithInstanceVariables
+ users: @milestone.issue_participants_visible_by_user(current_user) # rubocop:disable Gitlab/ModuleWithInstanceVariables
})
end
end