diff options
| author | Yorick Peterse <yorickpeterse@gmail.com> | 2019-02-27 17:23:43 +0300 |
|---|---|---|
| committer | Yorick Peterse <yorickpeterse@gmail.com> | 2019-02-27 17:23:43 +0300 |
| commit | b7cfcb5a67c2ab12b2e47f46021be1b0693ab400 (patch) | |
| tree | c39f1c6ce61f2706b9dadbfb9243032825741410 /app | |
| parent | dae57f565cbb16424379f896e72441484d4ecdd7 (diff) | |
| parent | 5608c3f2d8ffd8bad6502f652902ecf8c8d5d44a (diff) | |
Merge branch 'security-2798-fix-boards-policy-11-7' into '11-7-stable'
Disable issue board policies when issues are disabled
See merge request gitlab/gitlabhq!2911
Diffstat (limited to 'app')
| -rw-r--r-- | app/policies/project_policy.rb | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/app/policies/project_policy.rb b/app/policies/project_policy.rb index cadbc5ae009..a8270442ea9 100644 --- a/app/policies/project_policy.rb +++ b/app/policies/project_policy.rb @@ -299,6 +299,8 @@ class ProjectPolicy < BasePolicy rule { issues_disabled }.policy do prevent(*create_read_update_admin_destroy(:issue)) + prevent(*create_read_update_admin_destroy(:board)) + prevent(*create_read_update_admin_destroy(:list)) end rule { merge_requests_disabled | repository_disabled }.policy do |