16 lines
433 B
Ruby
16 lines
433 B
Ruby
|
class ProtectedBranchPolicy < BasePolicy
|
||
|
|
delegate { @subject.project }
|
||
|
|
|
||
|
|
condition(:requires_admin_to_unprotect?, scope: :subject) do
|
||
|
|
@subject.name == 'master' && Gitlab::CurrentSettings.only_admins_can_unprotect_master_branch?
|
||
|
|
end
|
||
|
|
|
||
|
|
rule { can?(:admin_project) }.policy do
|
||
|
|
enable :update_protected_branch
|
||
|
|
end
|
||
|
|
|
||
|
|
rule { requires_admin_to_unprotect? & ~admin }.policy do
|
||
|
|
prevent :update_protected_branch
|
||
|
|
end
|
||
|
|
end
|