diff options
| author | GitLab Release Tools Bot <robert+release-tools@gitlab.com> | 2019-10-24 21:53:17 +0300 |
|---|---|---|
| committer | GitLab Release Tools Bot <robert+release-tools@gitlab.com> | 2019-10-24 21:53:17 +0300 |
| commit | c9bcf8fc693c82000181b314f7d0240747e62d02 (patch) | |
| tree | 31994fb5855e2b8a25ac8ef809ed9d7b5689ab95 /lib | |
| parent | 853618e05f6fea4a3a48822601c60a89830269f4 (diff) | |
| parent | b58dd075d32e852e6c7ab306c84945cb5d73c06a (diff) | |
Merge branch 'security-2914-labels-visible-despite-no-access-to-issues-repositories-12-4' into '12-4-stable'
Labels visible despite no access to issues & repositories
See merge request gitlab/gitlabhq!3489
Diffstat (limited to 'lib')
| -rw-r--r-- | lib/gitlab/search_results.rb | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/lib/gitlab/search_results.rb b/lib/gitlab/search_results.rb index 782ac534a7b..d74e64116ca 100644 --- a/lib/gitlab/search_results.rb +++ b/lib/gitlab/search_results.rb @@ -163,7 +163,7 @@ module Gitlab return Milestone.none if project_ids.nil? authorized_project_ids_relation = - Project.where(id: project_ids).ids_with_milestone_available_for(current_user) + Project.where(id: project_ids).ids_with_issuables_available_for(current_user) milestones.where(project_id: authorized_project_ids_relation) end |