diff options
author | Alexandru Croitor <acroitor@gitlab.com> | 2019-09-06 21:46:51 +0300 |
---|---|---|
committer | Alexandru Croitor <acroitor@gitlab.com> | 2019-09-20 10:41:20 +0300 |
commit | ded9647d12a279b9cadbc3a5974d5c519279d86c (patch) | |
tree | 37fced6b14ea88f3f44aeb2f1eb72a0baac1ba71 /app | |
parent | 39381519f294742e4083dfd6a50c0c8ceddecd5d (diff) | |
download | gitlab-ce-ded9647d12a279b9cadbc3a5974d5c519279d86c.tar.gz |
Display only participants that user has permission to see
Diffstat (limited to 'app')
-rw-r--r-- | app/controllers/concerns/milestone_actions.rb | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/app/controllers/concerns/milestone_actions.rb b/app/controllers/concerns/milestone_actions.rb index 8b8b7db72f8..1ead631663e 100644 --- a/app/controllers/concerns/milestone_actions.rb +++ b/app/controllers/concerns/milestone_actions.rb @@ -20,7 +20,7 @@ module MilestoneActions format.html { redirect_to milestone_redirect_path } format.json do render json: tabs_json("shared/milestones/_participants_tab", { - users: @milestone.participants # rubocop:disable Gitlab/ModuleWithInstanceVariables + users: @milestone.issue_participants_visible_by_user(current_user) # rubocop:disable Gitlab/ModuleWithInstanceVariables }) end end |