From 756e7aa8c347ccf211db03a7fa16ab33c021f820 Mon Sep 17 00:00:00 2001 From: Douwe Maan Date: Fri, 27 Mar 2015 12:18:15 +0100 Subject: Don't allow full access to guests in ReferenceExtractor --- lib/gitlab/reference_extractor.rb | 3 --- 1 file changed, 3 deletions(-) (limited to 'lib/gitlab/reference_extractor.rb') diff --git a/lib/gitlab/reference_extractor.rb b/lib/gitlab/reference_extractor.rb index 422d35aceb7..719274394f0 100644 --- a/lib/gitlab/reference_extractor.rb +++ b/lib/gitlab/reference_extractor.rb @@ -13,9 +13,6 @@ module Gitlab end def can?(user, action, subject) - # When extracting references, no user means access to everything. - return true if user.nil? - Ability.abilities.allowed?(user, action, subject) end -- cgit v1.2.3