1 files changed, 21 insertions, 1 deletions
diff --git a/app/services/work_items/create_service.rb b/app/services/work_items/create_service.rb
index 49f7b89158b..705735fe403 100644
--- a/app/services/work_items/create_service.rb
+++ b/app/services/work_items/create_service.rb
@@ -2,6 +2,8 @@
 
 module WorkItems
   class CreateService
+    include ::Services::ReturnServiceResponses
+
     def initialize(project:, current_user: nil, params: {}, spam_params:)
       @create_service = ::Issues::CreateService.new(
         project: project,
@@ -10,10 +12,28 @@ module WorkItems
         spam_params: spam_params,
         build_service: ::WorkItems::BuildService.new(project: project, current_user: current_user, params: params)
       )
+      @current_user = current_user
+      @project = project
     end
 
     def execute
-      @create_service.execute
+      unless @current_user.can?(:create_work_item, @project)
+        return error(_('Operation not allowed'), :forbidden)
+      end
+
+      work_item = @create_service.execute
+
+      if work_item.valid?
+        success(payload(work_item))
+      else
+        error(work_item.errors.full_messages, :unprocessable_entity, pass_back: payload(work_item))
+      end
+    end
+
+    private
+
+    def payload(work_item)
+      { work_item: work_item }
     end
   end
 end