gitlab-org--gitlab-foss/app/controllers/projects/boards_controller.rb

class Projects::BoardsController < Projects::ApplicationController
  respond_to :html

  before_action :authorize_read_board!, only: [:show]

  def show
    ::Boards::CreateService.new(project, current_user).execute
  end

  private

  def authorize_read_board!
    return access_denied! unless can?(current_user, :read_board, project)
  end
end