diff options
| author | Alessio Caiazza <acaiazza@gitlab.com> | 2018-06-25 19:17:09 +0300 |
|---|---|---|
| committer | Alessio Caiazza <acaiazza@gitlab.com> | 2018-06-25 19:17:09 +0300 |
| commit | c7d809698386baa202ca6b2f4f94bcc64f06225c (patch) | |
| tree | d8af48092000216412466d220cec2b0df41cafaa /app/finders | |
| parent | 8d18f219feae2907a2f6f5041ea816395de19fb2 (diff) | |
| parent | c1cc4777caad078e3eff9ba6170beb7ee7254917 (diff) | |
Merge branch 'security-rd-do-not-show-internal-info-in-public-feed' into 'master'
[master] Don't show internal info in public feed
See merge request gitlab/gitlabhq!2395
Diffstat (limited to 'app/finders')
| -rw-r--r-- | app/finders/user_recent_events_finder.rb | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/app/finders/user_recent_events_finder.rb b/app/finders/user_recent_events_finder.rb index 65d6e019746..74776b2ed1f 100644 --- a/app/finders/user_recent_events_finder.rb +++ b/app/finders/user_recent_events_finder.rb @@ -56,7 +56,7 @@ class UserRecentEventsFinder visible = target_user .project_interactions - .where(visibility_level: [Gitlab::VisibilityLevel::INTERNAL, Gitlab::VisibilityLevel::PUBLIC]) + .where(visibility_level: Gitlab::VisibilityLevel.levels_for_user(current_user)) .select(:id) Gitlab::SQL::Union.new([authorized, visible]).to_sql |