summaryrefslogtreecommitdiff
path: root/app/policies/merge_request_policy.rb
blob: e2aca2a37d5bcafbb5e404ebdb04a74fcebc1de2 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
# frozen_string_literal: true

class MergeRequestPolicy < IssuablePolicy
  rule { locked }.policy do
    prevent :reopen_merge_request
  end

  # Only users who can read the merge request can comment.
  # Although :read_merge_request is computed in the policy context,
  # it would not be safe to prevent :create_note there, since
  # note permissions are shared, and this would apply too broadly.
  rule { ~can?(:read_merge_request) }.prevent :create_note
end

MergeRequestPolicy.prepend_if_ee('EE::MergeRequestPolicy')