module Groups class UpdateService < Groups::BaseService include UpdateVisibilityLevel def execute reject_parent_id! return false unless valid_visibility_level_change?(group, params[:visibility_level]) return false unless valid_share_with_group_lock_change? group.assign_attributes(params) begin group.save rescue Gitlab::UpdatePathError => e group.errors.add(:base, e.message) false end end private def reject_parent_id! params.except!(:parent_id) end def valid_share_with_group_lock_change? return true unless changing_share_with_group_lock? return true if can?(current_user, :change_share_with_group_lock, group) group.errors.add(:share_with_group_lock, s_('GroupSettings|cannot be disabled when the parent group "Share with group lock" is enabled, except by the owner of the parent group')) false end def changing_share_with_group_lock? return false if params[:share_with_group_lock].nil? params[:share_with_group_lock] != group.share_with_group_lock end end end