From 9f46488805e86b1bc341ea1620b866016c2ce5ed Mon Sep 17 00:00:00 2001
From: GitLab Bot <gitlab-bot@gitlab.com>
Date: Wed, 20 May 2020 14:34:42 +0000
Subject: Add latest changes from gitlab-org/gitlab@13-0-stable-ee

---
 lib/gitlab/git_access_design.rb | 28 ++++++++++++++++++++++++++++
 1 file changed, 28 insertions(+)
 create mode 100644 lib/gitlab/git_access_design.rb

(limited to 'lib/gitlab/git_access_design.rb')

diff --git a/lib/gitlab/git_access_design.rb b/lib/gitlab/git_access_design.rb
new file mode 100644
index 00000000000..36604bd0b3b
--- /dev/null
+++ b/lib/gitlab/git_access_design.rb
@@ -0,0 +1,28 @@
+# frozen_string_literal: true
+
+module Gitlab
+  class GitAccessDesign < GitAccess
+    def check(_cmd, _changes)
+      check_protocol!
+      check_can_create_design!
+
+      success_result
+    end
+
+    private
+
+    def check_protocol!
+      if protocol != 'web'
+        raise ::Gitlab::GitAccess::ForbiddenError, "Designs are only accessible using the web interface"
+      end
+    end
+
+    def check_can_create_design!
+      unless user&.can?(:create_design, project)
+        raise ::Gitlab::GitAccess::ForbiddenError, "You are not allowed to manage designs of this project"
+      end
+    end
+  end
+end
+
+Gitlab::GitAccessDesign.prepend_if_ee('EE::Gitlab::GitAccessDesign')
-- 
cgit v1.2.1