diff options
| author | GitLab Release Tools Bot <robert+release-tools@gitlab.com> | 2019-10-24 21:53:24 +0300 |
|---|---|---|
| committer | GitLab Release Tools Bot <robert+release-tools@gitlab.com> | 2019-10-24 21:53:24 +0300 |
| commit | 6df4db1f8df1240711d84586a7b7a9867ca3b57b (patch) | |
| tree | 1aac34dfd921079db878a08f1ef30931aa7b2ecc /app/policies/group_policy.rb | |
| parent | b3490cf1f8e87fc8955341ff2492d72836b4ee35 (diff) | |
| parent | f1320e4f938a5f508628b21a012db1617eab8946 (diff) | |
Merge branch 'security-developer-transfer-project-12-4' into '12-4-stable'
Require Maintainer permission on group where project is transferred to
See merge request gitlab/gitlabhq!3486
Diffstat (limited to 'app/policies/group_policy.rb')
| -rw-r--r-- | app/policies/group_policy.rb | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/app/policies/group_policy.rb b/app/policies/group_policy.rb index 9e8ee3acf00..13e5b4ae41a 100644 --- a/app/policies/group_policy.rb +++ b/app/policies/group_policy.rb @@ -131,6 +131,8 @@ class GroupPolicy < BasePolicy rule { owner | admin }.enable :read_statistics + rule { maintainer & can?(:create_projects) }.enable :transfer_projects + def access_level return GroupMember::NO_ACCESS if @user.nil? |