2016-08-16 19:05:44 +00:00
|
|
|
module Ci
|
|
|
|
class BuildPolicy < CommitStatusPolicy
|
2017-07-18 14:13:57 +00:00
|
|
|
condition(:protected_ref) do
|
2017-07-17 08:49:54 +00:00
|
|
|
access = ::Gitlab::UserAccess.new(@user, project: @subject.project)
|
|
|
|
|
2017-07-18 08:31:29 +00:00
|
|
|
if @subject.tag?
|
2017-07-17 08:49:54 +00:00
|
|
|
!access.can_create_tag?(@subject.ref)
|
2017-07-18 08:31:29 +00:00
|
|
|
else
|
2017-07-18 13:56:28 +00:00
|
|
|
!access.can_update_branch?(@subject.ref)
|
2017-07-18 08:31:29 +00:00
|
|
|
end
|
2017-04-12 09:26:18 +00:00
|
|
|
end
|
|
|
|
|
2017-11-06 17:47:05 +00:00
|
|
|
condition(:owner_of_job) do
|
2018-04-02 18:38:47 +00:00
|
|
|
@subject.triggered_by?(@user)
|
2017-11-06 13:20:44 +00:00
|
|
|
end
|
|
|
|
|
2018-05-23 01:54:57 +00:00
|
|
|
condition(:branch_allows_collaboration) do
|
|
|
|
@subject.project.branch_allows_collaboration?(@user, @subject.ref)
|
2018-05-15 08:18:22 +00:00
|
|
|
end
|
|
|
|
|
2018-07-05 13:55:10 +00:00
|
|
|
condition(:terminal, scope: :subject) do
|
|
|
|
@subject.has_terminal?
|
|
|
|
end
|
|
|
|
|
2017-11-06 17:47:05 +00:00
|
|
|
rule { protected_ref }.policy do
|
|
|
|
prevent :update_build
|
|
|
|
prevent :erase_build
|
|
|
|
end
|
|
|
|
|
2018-04-02 18:38:47 +00:00
|
|
|
rule { can?(:admin_build) | (can?(:update_build) & owner_of_job) }.enable :erase_build
|
2018-05-15 08:18:22 +00:00
|
|
|
|
2018-05-23 01:54:57 +00:00
|
|
|
rule { can?(:public_access) & branch_allows_collaboration }.policy do
|
2018-05-15 08:18:22 +00:00
|
|
|
enable :update_build
|
|
|
|
enable :update_commit_status
|
|
|
|
end
|
2018-07-05 13:55:10 +00:00
|
|
|
|
|
|
|
rule { can?(:update_build) & terminal }.enable :create_build_terminal
|
2016-08-16 19:05:44 +00:00
|
|
|
end
|
|
|
|
end
|