CE port Refactor Gitlab::Checks::ChangeAccess class

1 files changed, 22 insertions, 0 deletions

diff --git a/lib/gitlab/checks/push_check.rb b/lib/gitlab/checks/push_check.rb
new file mode 100644
index 00000000000..f3a52f09868
--- /dev/null
+++ b/lib/gitlab/checks/push_check.rb
@@ -0,0 +1,22 @@
+# frozen_string_literal: true
+
+module Gitlab
+  module Checks
+    class PushCheck < BaseChecker
+      def validate!
+        logger.log_timed("Checking if you are allowed to push...") do
+          unless can_push?
+            raise GitAccess::UnauthorizedError, 'You are not allowed to push code to this project.'
+          end
+        end
+      end
+
+      private
+
+      def can_push?
+        user_access.can_do_action?(:push_code) ||
+          user_access.can_push_to_branch?(branch_name)
+      end
+    end
+  end
+end