1 files changed, 7 insertions, 0 deletions
diff --git a/app/graphql/resolvers/users/snippets_resolver.rb b/app/graphql/resolvers/users/snippets_resolver.rb
index e8048b9deb9..ee1727aadbe 100644
--- a/app/graphql/resolvers/users/snippets_resolver.rb
+++ b/app/graphql/resolvers/users/snippets_resolver.rb
@@ -5,6 +5,7 @@ module Resolvers
   module Users
     class SnippetsResolver < BaseResolver
       include ResolvesSnippets
+      include Gitlab::Allowable
 
       alias_method :user, :object
 
@@ -14,6 +15,12 @@ module Resolvers
 
       private
 
+      def resolve_snippets(_args)
+        return Snippet.none unless Ability.allowed?(current_user, :read_user_profile, user)
+
+        super
+      end
+
       def snippet_finder_params(args)
         super.merge(author: user)
       end