diff options
| author | GitLab Release Tools Bot <robert+release-tools@gitlab.com> | 2019-10-29 18:58:19 +0300 |
|---|---|---|
| committer | GitLab Release Tools Bot <robert+release-tools@gitlab.com> | 2019-10-29 18:58:19 +0300 |
| commit | 077f2c6c432342ce4d011583e86d671b2b326a56 (patch) | |
| tree | c483d253d30858ed467fcf7e17cd2e1d1750881b /app/policies/group_policy.rb | |
| parent | cd284fef90c6c4980ecfd5e06c6344dbe7ca8b95 (diff) | |
| parent | 39c99361b655998aaca2114da3e9664c2da27f85 (diff) | |
Merge branch 'security-developer-transfer-project' into 'master'
Require Maintainer permission on group where project is transferred to
See merge request gitlab/gitlabhq!3420
Diffstat (limited to 'app/policies/group_policy.rb')
| -rw-r--r-- | app/policies/group_policy.rb | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/app/policies/group_policy.rb b/app/policies/group_policy.rb index 9e8ee3acf00..13e5b4ae41a 100644 --- a/app/policies/group_policy.rb +++ b/app/policies/group_policy.rb @@ -131,6 +131,8 @@ class GroupPolicy < BasePolicy rule { owner | admin }.enable :read_statistics + rule { maintainer & can?(:create_projects) }.enable :transfer_projects + def access_level return GroupMember::NO_ACCESS if @user.nil? |