diff options
| author | Oswaldo Ferreira <oswaldo@gitlab.com> | 2019-01-09 22:24:05 +0300 |
|---|---|---|
| committer | Yorick Peterse <yorickpeterse@gmail.com> | 2019-01-31 18:51:16 +0300 |
| commit | 68d13322290a52360cd485d24bcfff995d98cf97 (patch) | |
| tree | 0b3e69056d84097632ebfb017b4920381da4c437 /app/policies/project_policy.rb | |
| parent | a3cde02651af6e18fd91416ac1378aaed36ed115 (diff) | |
Don't process MR refs for guests in the notes
Diffstat (limited to 'app/policies/project_policy.rb')
| -rw-r--r-- | app/policies/project_policy.rb | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/app/policies/project_policy.rb b/app/policies/project_policy.rb index 12f9f29dcc1..d90bb647018 100644 --- a/app/policies/project_policy.rb +++ b/app/policies/project_policy.rb @@ -393,7 +393,7 @@ class ProjectPolicy < BasePolicy end.enable :read_issue_iid rule do - (can?(:read_project_for_iids) & merge_requests_visible_to_user) | can?(:read_merge_request) + (~guest & can?(:read_project_for_iids) & merge_requests_visible_to_user) | can?(:read_merge_request) end.enable :read_merge_request_iid rule { ~can_have_multiple_clusters & has_clusters }.prevent :add_cluster |