diff options
| author | Patrick Bajao <ebajao@gitlab.com> | 2019-07-01 11:23:23 +0300 |
|---|---|---|
| committer | Patrick Bajao <ebajao@gitlab.com> | 2019-07-01 11:23:26 +0300 |
| commit | 6b68acbfe9db1d3c855d7505817ebca62e3a61c1 (patch) | |
| tree | bdb3381fc5eb948a56de460a0335121afb871056 /app/controllers | |
| parent | 1ca5520bd6f3447ada3a1120d2a3bd445ab6746a (diff) | |
Check if user can `update_issue` on project
If user can update an issue under the specified confidential
issue project, should be able to find the project.
Diffstat (limited to 'app/controllers')
| -rw-r--r-- | app/controllers/projects/branches_controller.rb | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/app/controllers/projects/branches_controller.rb b/app/controllers/projects/branches_controller.rb index b3dfafb7b87..5e50801eb23 100644 --- a/app/controllers/projects/branches_controller.rb +++ b/app/controllers/projects/branches_controller.rb @@ -170,7 +170,7 @@ class Projects::BranchesController < Projects::ApplicationController confidential_issue_project = Project.find(params[:confidential_issue_project_id]) - return unless can?(current_user, :push_code, confidential_issue_project) + return unless can?(current_user, :update_issue, confidential_issue_project) confidential_issue_project end |