diff options
| author | GitLab Bot <gitlab-bot@gitlab.com> | 2022-01-10 23:37:25 +0300 |
|---|---|---|
| committer | GitLab Bot <gitlab-bot@gitlab.com> | 2022-01-10 23:37:52 +0300 |
| commit | c6983662116bcf5313cca0165499f14345788c28 (patch) | |
| tree | 8d31e97edc29cc8abdb6ded6867b9af567d5d03e /lib/api/projects.rb | |
| parent | 1eef146c2d1de19d4e995d421e5787053e50db80 (diff) | |
Add latest changes from gitlab-org/security/gitlab@14-6-stable-ee
Diffstat (limited to 'lib/api/projects.rb')
| -rw-r--r-- | lib/api/projects.rb | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/lib/api/projects.rb b/lib/api/projects.rb index 67f0b7af7a9..887c76941cf 100644 --- a/lib/api/projects.rb +++ b/lib/api/projects.rb @@ -613,6 +613,7 @@ module API source_project = Project.find_by_id(params[:project_id]) not_found!('Project') unless source_project && can?(current_user, :read_project, source_project) + forbidden!('Project') unless source_project && can?(current_user, :admin_project_member, source_project) result = ::Members::ImportProjectTeamService.new(current_user, params).execute |