diff options
| author | GitLab Bot <gitlab-bot@gitlab.com> | 2022-06-01 10:28:43 +0300 |
|---|---|---|
| committer | GitLab Bot <gitlab-bot@gitlab.com> | 2022-06-01 10:28:50 +0300 |
| commit | 7a9764bb646d28cf3e403be6c4cfe5875b1e9a44 (patch) | |
| tree | 13286eeee649d8df949383df81af9a041f6d4c33 /app | |
| parent | 37f194bbc19045abe013a58274494c1a6c8bbdd5 (diff) | |
Add latest changes from gitlab-org/security/gitlab@15-0-stable-ee
Diffstat (limited to 'app')
| -rw-r--r-- | app/services/ci/pipeline_trigger_service.rb | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/app/services/ci/pipeline_trigger_service.rb b/app/services/ci/pipeline_trigger_service.rb index 06eb1aee8e6..39ac9bf33e9 100644 --- a/app/services/ci/pipeline_trigger_service.rb +++ b/app/services/ci/pipeline_trigger_service.rb @@ -27,6 +27,7 @@ module Ci def create_pipeline_from_trigger(trigger) # this check is to not leak the presence of the project if user cannot read it return unless trigger.project == project + return unless can?(trigger.owner, :read_project, project) response = Ci::CreatePipelineService .new(project, trigger.owner, ref: params[:ref], variables_attributes: variables) |