summaryrefslogtreecommitdiff
path: root/app/policies/project_snippet_policy.rb
diff options
context:
space:
mode:
Diffstat (limited to 'app/policies/project_snippet_policy.rb')
-rw-r--r--app/policies/project_snippet_policy.rb10
1 files changed, 5 insertions, 5 deletions
diff --git a/app/policies/project_snippet_policy.rb b/app/policies/project_snippet_policy.rb
index e5e005cee6d..e2b101238dd 100644
--- a/app/policies/project_snippet_policy.rb
+++ b/app/policies/project_snippet_policy.rb
@@ -24,12 +24,12 @@ class ProjectSnippetPolicy < BasePolicy
# information about the snippet. However, :read_project_snippet on the *project*
# is used to hide/show various snippet-related controls, so we can't just move
# all of the handling here.
- rule do
+ rule {
all?(private_snippet | (internal_snippet & external_user),
- ~project.guest,
- ~is_author,
- ~full_private_access)
- end.prevent :read_project_snippet
+ ~project.guest,
+ ~is_author,
+ ~full_private_access)
+ }.prevent :read_project_snippet
rule { internal_snippet & ~is_author & ~admin }.policy do
prevent :update_project_snippet