app/services/update_snippet_service.rb


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22

class UpdateSnippetService < BaseService
  attr_accessor :snippet

  def initialize(project, user, snippet, params)
    super(project, user, params)
    @snippet = snippet
  end

  def execute
    # check that user is allowed to set specified visibility_level
    new_visibility = params[:visibility_level]
    if new_visibility && new_visibility.to_i != snippet.visibility_level
      unless can?(current_user, :change_visibility_level, snippet) &&
        Gitlab::VisibilityLevel.allowed_for?(current_user, new_visibility)
        deny_visibility_level(snippet, new_visibility)
        return snippet
      end
    end

    snippet.update_attributes(params)
  end
end