diff options
Diffstat (limited to 'app/policies/issue_policy.rb')
| -rw-r--r-- | app/policies/issue_policy.rb | 5 |
1 files changed, 3 insertions, 2 deletions
diff --git a/app/policies/issue_policy.rb b/app/policies/issue_policy.rb index 804709ed072..538959c92bd 100644 --- a/app/policies/issue_policy.rb +++ b/app/policies/issue_policy.rb @@ -14,8 +14,8 @@ class IssuePolicy < IssuablePolicy desc "Project belongs to a group, crm is enabled and user can read contacts in the root group" condition(:can_read_crm_contacts, scope: :subject) do - subject.project.group&.crm_enabled? && - (@user&.can?(:read_crm_contact, @subject.project.root_ancestor) || @user&.support_bot?) + subject_container&.crm_enabled? && + (@user&.can?(:read_crm_contact, subject_container.root_ancestor) || @user&.support_bot?) end desc "Issue is confidential" @@ -43,6 +43,7 @@ class IssuePolicy < IssuablePolicy rule { confidential & ~can_read_confidential }.policy do prevent(*create_read_update_admin_destroy(:issue)) + prevent(*create_read_update_admin_destroy(:work_item)) prevent :read_issue_iid end |