gitlab-org--gitlab-foss/app/policies/global_policy.rb

class GlobalPolicy < BasePolicy
  def rules
    can! :read_users_list unless restricted_public_level?

    return unless @user

    can! :create_group if @user.can_create_group

    unless @user.blocked? || @user.internal?
      can! :log_in unless @user.access_locked?
      can! :access_api
      can! :access_git
      can! :receive_notifications
      can! :use_quick_actions
    end
  end
end
factor in global permissions 2016-08-16 23:29:19 +00:00			`class GlobalPolicy < BasePolicy`
			`def rules`
Implement review comments for !12445 from @godfat and @rymai. - Use `GlobalPolicy` to authorize the users that a non-authenticated user can fetch from `/api/v4/users`. We allow access if the `Gitlab::VisibilityLevel::PUBLIC` visibility level is not restricted. - Further, as before, `/api/v4/users` is only accessible to unauthenticated users if the `username` parameter is passed. - Turn off `authenticate!` for the `/api/v4/users` endpoint by matching on the actual route + method, rather than the description. - Change the type of `current_user` check in `UsersFinder` to be more compatible with EE. 2017-06-29 07:43:41 +00:00			`can! :read_users_list unless restricted_public_level?`

factor in global permissions 2016-08-16 23:29:19 +00:00			`return unless @user`
line break after guard clause 2016-08-30 18:14:07 +00:00
factor in global permissions 2016-08-16 23:29:19 +00:00			`can! :create_group if @user.can_create_group`
add User#internal? and some global permissions 2017-02-28 21:09:23 +00:00
			`unless @user.blocked? \|\| @user.internal?`
use the policy stack to protect logins 2017-02-28 21:19:52 +00:00			`can! :log_in unless @user.access_locked?`
add User#internal? and some global permissions 2017-02-28 21:09:23 +00:00			`can! :access_api`
			`can! :access_git`
use policies to protect sending email 2017-02-28 23:24:04 +00:00			`can! :receive_notifications`
Rename "Slash commands" to "Quick actions" Fix https://gitlab.com/gitlab-org/gitlab-ce/issues/27070 Deprecate "chat commands" in favor of "slash commands" We looked for things like: - `slash commmand` - `slash_command` - `slash-command` - `SlashCommand` 2017-05-31 05:50:53 +00:00			`can! :use_quick_actions`
add User#internal? and some global permissions 2017-02-28 21:09:23 +00:00			`end`
factor in global permissions 2016-08-16 23:29:19 +00:00			`end`
			`end`