1 files changed, 17 insertions, 0 deletions
diff --git a/app/policies/project_group_link_policy.rb b/app/policies/project_group_link_policy.rb
new file mode 100644
index 00000000000..00bb246d70b
--- /dev/null
+++ b/app/policies/project_group_link_policy.rb
@@ -0,0 +1,17 @@
+# frozen_string_literal: true
+
+class ProjectGroupLinkPolicy < BasePolicy # rubocop:disable Gitlab/NamespacedClass
+  condition(:group_owner_or_project_admin) { group_owner? || project_admin? }
+
+  rule { group_owner_or_project_admin }.enable :admin_project_group_link
+
+  private
+
+  def group_owner?
+    can?(:admin_group, @subject.group)
+  end
+
+  def project_admin?
+    can?(:admin_project, @subject.project)
+  end
+end