diff options
| author | GitLab Bot <gitlab-bot@gitlab.com> | 2022-09-29 00:59:41 +0300 |
|---|---|---|
| committer | GitLab Bot <gitlab-bot@gitlab.com> | 2022-09-29 00:59:41 +0300 |
| commit | cc201d1e1be2c8f4de2e2265c2b83bd925f8a260 (patch) | |
| tree | 7347a079cde32c08900547d96a7c5ddbc2a50259 /app/policies/note_policy.rb | |
| parent | 70d9f335be46efecb1328cd2b7da3f3e17516d7d (diff) | |
Add latest changes from gitlab-org/security/gitlab@15-4-stable-ee
Diffstat (limited to 'app/policies/note_policy.rb')
| -rw-r--r-- | app/policies/note_policy.rb | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/app/policies/note_policy.rb b/app/policies/note_policy.rb index e85f18f2d37..1bffcc5aea2 100644 --- a/app/policies/note_policy.rb +++ b/app/policies/note_policy.rb @@ -20,6 +20,7 @@ class NotePolicy < BasePolicy condition(:confidential, scope: :subject) { @subject.confidential? } + # If this condition changes IssuablePolicy#read_confidential_notes should be updated too condition(:can_read_confidential) do access_level >= Gitlab::Access::REPORTER || @subject.noteable_assignee_or_author?(@user) || admin? end |