1 files changed, 1 insertions, 43 deletions
diff --git a/app/models/protected_branch/push_access_level.rb b/app/models/protected_branch/push_access_level.rb
index c86ca5723fa..53cec0c5511 100644
--- a/app/models/protected_branch/push_access_level.rb
+++ b/app/models/protected_branch/push_access_level.rb
@@ -3,49 +3,7 @@
 class ProtectedBranch::PushAccessLevel < ApplicationRecord
   include Importable
   include ProtectedBranchAccess
+  include ProtectedRefDeployKeyAccess
   # default value for the access_level column
   GITLAB_DEFAULT_ACCESS_LEVEL = Gitlab::Access::MAINTAINER
-
-  belongs_to :deploy_key
-
-  validates :access_level, uniqueness: { scope: :protected_branch_id, if: :role?,
-                                         conditions: -> { where(user_id: nil, group_id: nil, deploy_key_id: nil) } }
-  validates :deploy_key_id, uniqueness: { scope: :protected_branch_id, allow_nil: true }
-  validate :validate_deploy_key_membership
-
-  def type
-    if self.deploy_key.present?
-      :deploy_key
-    else
-      super
-    end
-  end
-
-  def humanize
-    return "Deploy key" if deploy_key.present?
-
-    super
-  end
-
-  def check_access(user)
-    if user && deploy_key.present?
-      return user.can?(:read_project, project) && enabled_deploy_key_for_user?(deploy_key, user)
-    end
-
-    super
-  end
-
-  private
-
-  def validate_deploy_key_membership
-    return unless deploy_key
-
-    unless project.deploy_keys_projects.where(deploy_key: deploy_key).exists?
-      self.errors.add(:deploy_key, 'is not enabled for this project')
-    end
-  end
-
-  def enabled_deploy_key_for_user?(deploy_key, user)
-    deploy_key.user_id == user.id && DeployKey.with_write_access_for_project(protected_branch.project, deploy_key: deploy_key).any?
-  end
 end