2017-05-07 22:35:56 +00:00
|
|
|
module Ci
|
|
|
|
class PipelineSchedulePolicy < PipelinePolicy
|
2017-06-26 09:25:08 +00:00
|
|
|
alias_method :pipeline_schedule, :subject
|
|
|
|
|
2017-12-06 07:23:59 +00:00
|
|
|
condition(:protected_ref) do
|
2017-12-08 07:49:55 +00:00
|
|
|
ref_protected?(@user, @subject.project, @subject.project.repository.tag_exists?(@subject.ref), @subject.ref)
|
2017-12-06 07:23:59 +00:00
|
|
|
end
|
|
|
|
|
2017-07-07 10:09:35 +00:00
|
|
|
condition(:owner_of_schedule) do
|
|
|
|
can?(:developer_access) && pipeline_schedule.owned_by?(@user)
|
2017-06-28 12:42:13 +00:00
|
|
|
end
|
2017-06-27 07:16:15 +00:00
|
|
|
|
2017-07-20 10:54:36 +00:00
|
|
|
condition(:non_owner_of_schedule) do
|
|
|
|
!pipeline_schedule.owned_by?(@user)
|
|
|
|
end
|
|
|
|
|
2017-12-06 07:23:59 +00:00
|
|
|
rule { can?(:developer_access) }.policy do
|
|
|
|
enable :play_pipeline_schedule
|
|
|
|
end
|
|
|
|
|
2017-07-07 10:09:35 +00:00
|
|
|
rule { can?(:master_access) | owner_of_schedule }.policy do
|
|
|
|
enable :update_pipeline_schedule
|
|
|
|
enable :admin_pipeline_schedule
|
2017-06-28 12:42:13 +00:00
|
|
|
end
|
2017-12-06 07:23:59 +00:00
|
|
|
|
2017-07-20 10:54:36 +00:00
|
|
|
rule { can?(:master_access) & non_owner_of_schedule }.policy do
|
|
|
|
enable :take_ownership_pipeline_schedule
|
|
|
|
end
|
|
|
|
|
2017-12-06 07:23:59 +00:00
|
|
|
rule { protected_ref }.prevent :play_pipeline_schedule
|
2017-05-07 22:35:56 +00:00
|
|
|
end
|
|
|
|
end
|