From a18ac62756573a2da2c42ca50b6f30033be6fa63 Mon Sep 17 00:00:00 2001 From: Felipe Artur Date: Wed, 16 Mar 2016 21:23:59 -0300 Subject: Block internal groups/projects visibility to external users --- app/finders/contributed_projects_finder.rb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'app/finders/contributed_projects_finder.rb') diff --git a/app/finders/contributed_projects_finder.rb b/app/finders/contributed_projects_finder.rb index 0209649b017..4f7fe1c748b 100644 --- a/app/finders/contributed_projects_finder.rb +++ b/app/finders/contributed_projects_finder.rb @@ -11,7 +11,7 @@ class ContributedProjectsFinder # # Returns an ActiveRecord::Relation. def execute(current_user = nil) - if current_user + if current_user && !current_user.external? relation = projects_visible_to_user(current_user) else relation = public_projects -- cgit v1.2.3