diff options
| author | GitLab Bot <gitlab-bot@gitlab.com> | 2022-10-27 00:09:20 +0300 |
|---|---|---|
| committer | GitLab Bot <gitlab-bot@gitlab.com> | 2022-10-27 00:09:20 +0300 |
| commit | f825fd1d881ce077ad868a70fd8d7db6a49e4700 (patch) | |
| tree | daeae56475be62f02a6a00d7af2f2161a8dc6c50 /app/policies | |
| parent | 51ba1dfa3bed95ec8c3fdee9b682a7941c4c34cc (diff) | |
Add latest changes from gitlab-org/gitlab@master
Diffstat (limited to 'app/policies')
| -rw-r--r-- | app/policies/project_policy.rb | 9 |
1 files changed, 9 insertions, 0 deletions
diff --git a/app/policies/project_policy.rb b/app/policies/project_policy.rb index 77bdf9d62fc..832b78bb9c3 100644 --- a/app/policies/project_policy.rb +++ b/app/policies/project_policy.rb @@ -213,6 +213,7 @@ class ProjectPolicy < BasePolicy environments feature_flags releases + infrastructure ] features.each do |f| @@ -409,6 +410,14 @@ class ProjectPolicy < BasePolicy prevent(*create_read_update_admin_destroy(:alert_management_alert)) end + rule { split_operations_visibility_permissions & infrastructure_disabled }.policy do + prevent(*create_read_update_admin_destroy(:terraform_state)) + prevent(*create_read_update_admin_destroy(:cluster)) + prevent(:read_pod_logs) + prevent(:read_prometheus) + prevent(:admin_project_google_cloud) + end + rule { can?(:metrics_dashboard) }.policy do enable :read_prometheus enable :read_deployment |