2018-07-24 10:00:56 +00:00
|
|
|
# frozen_string_literal: true
|
|
|
|
|
2016-08-16 18:32:08 +00:00
|
|
|
class MergeRequestPolicy < IssuablePolicy
|
2019-03-08 08:34:20 +00:00
|
|
|
rule { locked }.policy do
|
|
|
|
prevent :reopen_merge_request
|
|
|
|
end
|
2019-06-05 03:30:54 +00:00
|
|
|
|
|
|
|
# Only users who can read the merge request can comment.
|
|
|
|
# Although :read_merge_request is computed in the policy context,
|
|
|
|
# it would not be safe to prevent :create_note there, since
|
|
|
|
# note permissions are shared, and this would apply too broadly.
|
2021-03-09 00:09:23 +00:00
|
|
|
rule { ~can?(:read_merge_request) }.policy do
|
|
|
|
prevent :create_note
|
|
|
|
prevent :accept_merge_request
|
|
|
|
end
|
2020-07-10 18:09:45 +00:00
|
|
|
|
|
|
|
rule { can?(:update_merge_request) }.policy do
|
|
|
|
enable :approve_merge_request
|
|
|
|
end
|
2020-10-30 18:08:56 +00:00
|
|
|
|
|
|
|
rule { ~anonymous & can?(:read_merge_request) }.policy do
|
|
|
|
enable :create_todo
|
2021-05-21 12:10:27 +00:00
|
|
|
enable :update_subscription
|
2020-10-30 18:08:56 +00:00
|
|
|
end
|
2021-03-09 00:09:23 +00:00
|
|
|
|
|
|
|
condition(:can_merge) { @subject.can_be_merged_by?(@user) }
|
|
|
|
|
|
|
|
rule { can_merge }.policy do
|
|
|
|
enable :accept_merge_request
|
|
|
|
end
|
2021-06-11 18:10:13 +00:00
|
|
|
|
|
|
|
rule { can?(:admin_merge_request) }.policy do
|
|
|
|
enable :set_merge_request_metadata
|
|
|
|
end
|
2016-08-16 18:32:08 +00:00
|
|
|
end
|
2019-09-13 13:26:31 +00:00
|
|
|
|
2021-05-11 21:10:21 +00:00
|
|
|
MergeRequestPolicy.prepend_mod_with('MergeRequestPolicy')
|