blob: 077e4764b344d66dcea143bcf45a81f0e25192ff (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
|
# frozen_string_literal: true
class ReleasePolicy < BasePolicy
delegate { @subject.project }
condition(:protected_tag) do
access = ::Gitlab::UserAccess.new(@user, container: @subject.project)
!access.can_create_tag?(@subject.tag)
end
rule { protected_tag }.policy do
prevent :create_release
prevent :update_release
prevent :destroy_release
end
end
|