gitlab-org--gitlab-foss/app/services/concerns/update_visibility_level.rb

# frozen_string_literal: true

module UpdateVisibilityLevel
  # check that user is allowed to set specified visibility_level
  def valid_visibility_level_change?(target, new_visibility)
    return true unless new_visibility

    new_visibility_level = Gitlab::VisibilityLevel.level_value(new_visibility, fallback_value: nil)

    if new_visibility_level != target.visibility_level_value
      unless can?(current_user, :change_visibility_level, target) &&
          Gitlab::VisibilityLevel.allowed_for?(current_user, new_visibility_level)

        deny_visibility_level(target, new_visibility_level)
        return false
      end
    end

    true
  end
end