From 39c99361b655998aaca2114da3e9664c2da27f85 Mon Sep 17 00:00:00 2001 From: manojmj Date: Mon, 23 Sep 2019 13:12:26 +0530 Subject: Require maintainer permission to transfer projects --- app/policies/group_policy.rb | 2 ++ app/policies/namespace_policy.rb | 2 ++ 2 files changed, 4 insertions(+) (limited to 'app/policies') diff --git a/app/policies/group_policy.rb b/app/policies/group_policy.rb index 951a104122d..8e1ded708ae 100644 --- a/app/policies/group_policy.rb +++ b/app/policies/group_policy.rb @@ -128,6 +128,8 @@ class GroupPolicy < BasePolicy rule { owner | admin }.enable :read_statistics + rule { maintainer & can?(:create_projects) }.enable :transfer_projects + def access_level return GroupMember::NO_ACCESS if @user.nil? diff --git a/app/policies/namespace_policy.rb b/app/policies/namespace_policy.rb index fd3bdddded6..350dd208499 100644 --- a/app/policies/namespace_policy.rb +++ b/app/policies/namespace_policy.rb @@ -15,6 +15,8 @@ class NamespacePolicy < BasePolicy end rule { personal_project & ~can_create_personal_project }.prevent :create_projects + + rule { (owner | admin) & can?(:create_projects) }.enable :transfer_projects end NamespacePolicy.prepend_if_ee('EE::NamespacePolicy') -- cgit v1.2.3