diff options
| author | GitLab Release Tools Bot <robert+release-tools@gitlab.com> | 2019-03-26 18:29:05 +0300 |
|---|---|---|
| committer | GitLab Release Tools Bot <robert+release-tools@gitlab.com> | 2019-03-26 18:29:05 +0300 |
| commit | 9b0fda07bcaa6af765c5858bfeaf8035a49f9470 (patch) | |
| tree | f9baf539664699fdd7482d9ab7743e8ed523d330 /app/views | |
| parent | 0a235409c7360d0abfa530e3cfe49fc57b239f26 (diff) | |
| parent | 456320b0e7e8c40271890c684ffba6263b89931d (diff) | |
Merge branch 'security-56224-11-9' into '11-9-stable'
Fix related branches visible in issues for guests
See merge request gitlab/gitlabhq!3018
Diffstat (limited to 'app/views')
| -rw-r--r-- | app/views/projects/issues/show.html.haml | 5 |
1 files changed, 3 insertions, 2 deletions
diff --git a/app/views/projects/issues/show.html.haml b/app/views/projects/issues/show.html.haml index 3a674da6e87..819d3c4ec76 100644 --- a/app/views/projects/issues/show.html.haml +++ b/app/views/projects/issues/show.html.haml @@ -80,8 +80,9 @@ #merge-requests{ data: { url: referenced_merge_requests_project_issue_path(@project, @issue) } } // This element is filled in using JavaScript. - #related-branches{ data: { url: related_branches_project_issue_path(@project, @issue) } } - // This element is filled in using JavaScript. + - if can?(current_user, :download_code, @project) + #related-branches{ data: { url: related_branches_project_issue_path(@project, @issue) } } + // This element is filled in using JavaScript. .content-block.emoji-block.emoji-block-sticky .row |