diff options
author | GitLab Bot <gitlab-bot@gitlab.com> | 2022-02-18 12:45:46 +0300 |
---|---|---|
committer | GitLab Bot <gitlab-bot@gitlab.com> | 2022-02-18 12:45:46 +0300 |
commit | a7b3560714b4d9cc4ab32dffcd1f74a284b93580 (patch) | |
tree | 7452bd5c3545c2fa67a28aa013835fb4fa071baf /app/policies/project_policy.rb | |
parent | ee9173579ae56a3dbfe5afe9f9410c65bb327ca7 (diff) |
Add latest changes from gitlab-org/gitlab@14-8-stable-eev14.8.0-rc42
Diffstat (limited to 'app/policies/project_policy.rb')
-rw-r--r-- | app/policies/project_policy.rb | 8 |
1 files changed, 6 insertions, 2 deletions
diff --git a/app/policies/project_policy.rb b/app/policies/project_policy.rb index 55f43cd9f7b..4cc5ed06d61 100644 --- a/app/policies/project_policy.rb +++ b/app/policies/project_policy.rb @@ -240,6 +240,7 @@ class ProjectPolicy < BasePolicy enable :read_wiki enable :read_issue enable :read_label + enable :read_planning_hierarchy enable :read_milestone enable :read_snippet enable :read_project_member @@ -258,11 +259,13 @@ class ProjectPolicy < BasePolicy rule { can?(:reporter_access) & can?(:create_issue) }.enable :create_incident - rule { can?(:guest_access) & can?(:create_issue) }.policy do + rule { can?(:create_issue) }.policy do enable :create_task enable :create_work_item end + rule { can?(:update_issue) }.enable :update_work_item + # These abilities are not allowed to admins that are not members of the project, # that's why they are defined separately. rule { guest & can?(:download_code) }.enable :build_download_code @@ -385,6 +388,7 @@ class ProjectPolicy < BasePolicy enable :destroy_environment enable :create_deployment enable :update_deployment + enable :read_cluster enable :create_release enable :update_release enable :destroy_release @@ -433,7 +437,6 @@ class ProjectPolicy < BasePolicy enable :read_pages enable :update_pages enable :remove_pages - enable :read_cluster enable :add_cluster enable :create_cluster enable :update_cluster @@ -572,6 +575,7 @@ class ProjectPolicy < BasePolicy enable :read_issue_board_list enable :read_wiki enable :read_label + enable :read_planning_hierarchy enable :read_milestone enable :read_snippet enable :read_project_member |