diff options
Diffstat (limited to 'app/policies/global_policy.rb')
| -rw-r--r-- | app/policies/global_policy.rb | 6 |
1 files changed, 5 insertions, 1 deletions
diff --git a/app/policies/global_policy.rb b/app/policies/global_policy.rb index 3e5a1a356ad..b96ad9a73c8 100644 --- a/app/policies/global_policy.rb +++ b/app/policies/global_policy.rb @@ -62,10 +62,14 @@ class GlobalPolicy < BasePolicy rule { ~can?(:access_api) }.prevent :execute_graphql_mutation - rule { blocked | (internal & ~migration_bot & ~security_bot) }.policy do + rule { blocked | (internal & ~migration_bot & ~security_bot & ~security_policy_bot) }.policy do prevent :access_git end + rule { security_policy_bot }.policy do + enable :access_git + end + rule { project_bot | service_account }.policy do prevent :log_in prevent :receive_notifications |