From d0842d20758e2f33d44b41a250d361853abe47f4 Mon Sep 17 00:00:00 2001 From: Alexis Reigel Date: Mon, 25 Sep 2017 15:28:49 +0200 Subject: disallow group runners to become project runners --- lib/api/runners.rb | 1 + 1 file changed, 1 insertion(+) (limited to 'lib') diff --git a/lib/api/runners.rb b/lib/api/runners.rb index ef4ec3f4800..84d33879c38 100644 --- a/lib/api/runners.rb +++ b/lib/api/runners.rb @@ -206,6 +206,7 @@ module API def authenticate_enable_runner!(runner) forbidden!("Runner is shared") if runner.is_shared? forbidden!("Runner is locked") if runner.locked? + forbidden!("Runner is a group runner") if runner.group? return if current_user.admin? forbidden!("No access granted") unless user_can_access_runner?(runner) -- cgit v1.2.1