summaryrefslogtreecommitdiff
path: root/app/controllers/concerns/project_unauthorized.rb
blob: 00f5e4b687c161af091eea9f9b028199115af9be (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
# frozen_string_literal: true

module ProjectUnauthorized
  module ControllerActions
    def self.on_routable_not_found
      lambda do |routable|
        return unless routable.is_a?(Project)

        if routable
          label = routable.external_authorization_classification_label
          rejection_reason = nil

          unless ::Gitlab::ExternalAuthorization.access_allowed?(current_user, label)
            rejection_reason = ::Gitlab::ExternalAuthorization.rejection_reason(current_user, label)
            rejection_reason ||= _('External authorization denied access to this project')
          end

          if rejection_reason
            access_denied!(rejection_reason)
          end
        end
      end
    end
  end
end