class UpdateSnippetService < BaseService attr_accessor :snippet def initialize(project, user, snippet, params) super(project, user, params) @snippet = snippet end def execute # check that user is allowed to set specified visibility_level new_visibility = params[:visibility_level] if new_visibility && new_visibility.to_i != snippet.visibility_level unless Gitlab::VisibilityLevel.allowed_for?(current_user, new_visibility) deny_visibility_level(snippet, new_visibility) return snippet end end snippet.update_attributes(params) end end