From 7b52cff4896c8f681aea34fb273209400cf3e06e Mon Sep 17 00:00:00 2001 From: Hordur Freyr Yngvason Date: Thu, 4 Jul 2019 12:31:44 +0200 Subject: Restrict slash commands to users who can log in --- app/models/project_services/slash_commands_service.rb | 2 ++ 1 file changed, 2 insertions(+) (limited to 'app/models/project_services') diff --git a/app/models/project_services/slash_commands_service.rb b/app/models/project_services/slash_commands_service.rb index 5f5cff97808..cb16ad75d14 100644 --- a/app/models/project_services/slash_commands_service.rb +++ b/app/models/project_services/slash_commands_service.rb @@ -35,6 +35,8 @@ class SlashCommandsService < Service chat_user = find_chat_user(params) if chat_user&.user + return Gitlab::SlashCommands::Presenters::Access.new.access_denied unless chat_user.user.can?(:use_slash_commands) + Gitlab::SlashCommands::Command.new(project, chat_user, params).execute else url = authorize_chat_name_url(params) -- cgit v1.2.3