diff options
| author | Valery Sizov <valery@gitlab.com> | 2016-10-04 15:52:08 +0300 |
|---|---|---|
| committer | Valery Sizov <valery@gitlab.com> | 2016-10-11 16:51:26 +0300 |
| commit | b4004488f76d7360acd2f38277d617447c76b888 (patch) | |
| tree | d52552cccf8b51ba4e099f0afbb05bf94a1a1472 /app/policies/project_policy.rb | |
| parent | a3169d522a0db269770141a1b30c3df5acee82f3 (diff) | |
Make guests unable to view MRs
Diffstat (limited to 'app/policies/project_policy.rb')
| -rw-r--r-- | app/policies/project_policy.rb | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/app/policies/project_policy.rb b/app/policies/project_policy.rb index a806cf83782..be4721d7a51 100644 --- a/app/policies/project_policy.rb +++ b/app/policies/project_policy.rb @@ -40,7 +40,6 @@ class ProjectPolicy < BasePolicy can! :read_milestone can! :read_project_snippet can! :read_project_member - can! :read_merge_request can! :read_note can! :create_project can! :create_issue @@ -63,6 +62,7 @@ class ProjectPolicy < BasePolicy can! :read_pipeline can! :read_environment can! :read_deployment + can! :read_merge_request end # Permissions given when an user is team member of a project @@ -117,6 +117,7 @@ class ProjectPolicy < BasePolicy can! :read_container_image can! :build_download_code can! :build_read_container_image + can! :read_merge_request end def owner_access! |