diff options
| author | Yorick Peterse <yorickpeterse@gmail.com> | 2019-03-04 21:36:58 +0300 |
|---|---|---|
| committer | Yorick Peterse <yorickpeterse@gmail.com> | 2019-03-04 21:36:58 +0300 |
| commit | 9d9591f43c0d0948267a75fc098f0c325aa75535 (patch) | |
| tree | 6e3704a2eb23b038c1498a88e5c15c38eb121eb7 /app/policies/project_policy.rb | |
| parent | 9803962d343d3beb3513d4d8c72e1b6895731d86 (diff) | |
| parent | 5dc047dc72c08a64aaf4f4a0c9fe0fba2742b905 (diff) | |
Merge branch 'security-2798-fix-boards-policy' into 'master'
Disable issue board policies when issues are disabled
Closes #2798
See merge request gitlab/gitlabhq!2894
Diffstat (limited to 'app/policies/project_policy.rb')
| -rw-r--r-- | app/policies/project_policy.rb | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/app/policies/project_policy.rb b/app/policies/project_policy.rb index 95dd8b2795e..9ed868f4f2e 100644 --- a/app/policies/project_policy.rb +++ b/app/policies/project_policy.rb @@ -299,6 +299,8 @@ class ProjectPolicy < BasePolicy rule { issues_disabled }.policy do prevent(*create_read_update_admin_destroy(:issue)) + prevent(*create_read_update_admin_destroy(:board)) + prevent(*create_read_update_admin_destroy(:list)) end rule { merge_requests_disabled | repository_disabled }.policy do |