From 71ccfde322b633e9245bee6acba1e64cb7640f19 Mon Sep 17 00:00:00 2001 From: Bob Van Landuyt Date: Fri, 6 Apr 2018 19:58:53 +0200 Subject: Correct permissions for creating merge requests from issues This could only be possible for users that can create merge requests within a project. So they need to be a allowed to create a branch and create a merge request. --- lib/gitlab/email/handler/create_merge_request_handler.rb | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) (limited to 'lib/gitlab/email') diff --git a/lib/gitlab/email/handler/create_merge_request_handler.rb b/lib/gitlab/email/handler/create_merge_request_handler.rb index 3436306e122..2f864f2082b 100644 --- a/lib/gitlab/email/handler/create_merge_request_handler.rb +++ b/lib/gitlab/email/handler/create_merge_request_handler.rb @@ -23,7 +23,8 @@ module Gitlab def execute raise ProjectNotFound unless project - validate_permission!(:create_merge_request) + validate_permission!(:create_merge_request_in) + validate_permission!(:create_merge_request_from) verify_record!( record: create_merge_request, -- cgit v1.2.1