1 files changed, 28 insertions, 0 deletions
diff --git a/lib/gitlab/git_access_design.rb b/lib/gitlab/git_access_design.rb
new file mode 100644
index 00000000000..36604bd0b3b
--- /dev/null
+++ b/lib/gitlab/git_access_design.rb
@@ -0,0 +1,28 @@
+# frozen_string_literal: true
+
+module Gitlab
+  class GitAccessDesign < GitAccess
+    def check(_cmd, _changes)
+      check_protocol!
+      check_can_create_design!
+
+      success_result
+    end
+
+    private
+
+    def check_protocol!
+      if protocol != 'web'
+        raise ::Gitlab::GitAccess::ForbiddenError, "Designs are only accessible using the web interface"
+      end
+    end
+
+    def check_can_create_design!
+      unless user&.can?(:create_design, project)
+        raise ::Gitlab::GitAccess::ForbiddenError, "You are not allowed to manage designs of this project"
+      end
+    end
+  end
+end
+
+Gitlab::GitAccessDesign.prepend_if_ee('EE::Gitlab::GitAccessDesign')