diff options
| author | Rémy Coutable <remy@rymai.me> | 2016-08-09 18:51:40 +0300 |
|---|---|---|
| committer | Rémy Coutable <remy@rymai.me> | 2016-08-13 01:06:11 +0300 |
| commit | a54fdc384fee9daeab1b9fb638dae5dce4e4be15 (patch) | |
| tree | faa881a6d0bfcb490f6c6655de9967265f1d3083 /app/services/issues/reopen_service.rb | |
| parent | 0eea8c885743575b0e93a98846b3663e9903aa66 (diff) | |
Enforce permissions in `{Issues,MergeRequests}::{Close,Reopen}Service`
Signed-off-by: Rémy Coutable <remy@rymai.me>
Diffstat (limited to 'app/services/issues/reopen_service.rb')
| -rw-r--r-- | app/services/issues/reopen_service.rb | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/app/services/issues/reopen_service.rb b/app/services/issues/reopen_service.rb index e48ca359f4f..40fbe354492 100644 --- a/app/services/issues/reopen_service.rb +++ b/app/services/issues/reopen_service.rb @@ -1,6 +1,8 @@ module Issues class ReopenService < Issues::BaseService def execute(issue) + return issue unless can?(current_user, :update_issue, issue) + if issue.reopen event_service.reopen_issue(issue, current_user) create_note(issue) |