diff options
| author | GitLab Release Tools Bot <robert+release-tools@gitlab.com> | 2019-10-29 18:58:24 +0300 |
|---|---|---|
| committer | GitLab Release Tools Bot <robert+release-tools@gitlab.com> | 2019-10-29 18:58:24 +0300 |
| commit | 771f3fb9aae6129f5e6209e2f77e996e4562f176 (patch) | |
| tree | 63bc9c174b9657a737a1c6623c0c8ec5157ac0b7 /lib | |
| parent | c7ee6535d491c4595b4e1e2736032d7d679ddb0d (diff) | |
| parent | 6ff7788d4cb6fcfec1ec1a2e9d42c04a0eb31891 (diff) | |
Merge branch 'security-2914-labels-visible-despite-no-access-to-issues-repositories' into 'master'
Labels visible despite no access to issues & repositories
See merge request gitlab/gitlabhq!3409
Diffstat (limited to 'lib')
| -rw-r--r-- | lib/gitlab/search_results.rb | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/lib/gitlab/search_results.rb b/lib/gitlab/search_results.rb index 782ac534a7b..d74e64116ca 100644 --- a/lib/gitlab/search_results.rb +++ b/lib/gitlab/search_results.rb @@ -163,7 +163,7 @@ module Gitlab return Milestone.none if project_ids.nil? authorized_project_ids_relation = - Project.where(id: project_ids).ids_with_milestone_available_for(current_user) + Project.where(id: project_ids).ids_with_issuables_available_for(current_user) milestones.where(project_id: authorized_project_ids_relation) end |