From e4a92d342784ccbb929e7d2b1faa42d6c2f591a3 Mon Sep 17 00:00:00 2001
From: GitLab Bot <gitlab-bot@gitlab.com>
Date: Fri, 6 Jan 2023 22:28:28 +0000
Subject: Add latest changes from gitlab-org/security/gitlab@15-7-stable-ee

---
 app/policies/project_policy.rb | 3 +++
 1 file changed, 3 insertions(+)

(limited to 'app/policies')

diff --git a/app/policies/project_policy.rb b/app/policies/project_policy.rb
index 7f67e80e432..2a13fafa313 100644
--- a/app/policies/project_policy.rb
+++ b/app/policies/project_policy.rb
@@ -308,6 +308,8 @@ class ProjectPolicy < BasePolicy
   rule { guest & can?(:download_code) }.enable :build_download_code
   rule { guest & can?(:read_container_image) }.enable :build_read_container_image
 
+  rule { guest & ~public_project }.enable :read_grafana
+
   rule { can?(:reporter_access) }.policy do
     enable :admin_issue_board
     enable :download_code
@@ -340,6 +342,7 @@ class ProjectPolicy < BasePolicy
     enable :read_package
     enable :read_product_analytics
     enable :read_ci_cd_analytics
+    enable :read_grafana
   end
 
   # We define `:public_user_access` separately because there are cases in gitlab-ee
-- 
cgit v1.2.3