Commit graph

12 commits

Author SHA1 Message Date
Jan Beckmann
eba4b9404f Disallow reopening of locked merge requests
Fixes #56864
2019-03-08 08:34:20 +00:00
Tiago Botelho
52feca595a
Adds validation to check if user can read project
An issuable should not be available to a user if the
project is not visible to that specific user
2018-12-19 10:56:11 +00:00
Jarka Kadlecová
d729ea19da Restrict reopening locked issues for issue authors 2018-09-04 12:25:18 +02:00
gfyoung
d5bf57a6af Enable frozen string in presenters and policies
Enable frozen string in:

* app/presenters
* app/policies

Partially addresses #47424.
2018-07-24 13:18:25 -07:00
Douwe Maan
267a909600 Remove edit_note and update_note abilities in favor of admin_note 2018-04-10 15:46:20 +02:00
Sean McGivern
e7b1d201dd Fix N+1 in MergeRequestParser
read_project can be prevented by a very expensive condition, which we want to
avoid, while still not writing manual SQL queries. read_project_for_iids is used
by read_issue_iid and read_merge_request_iid to satisfy both of those
constraints, and allow the declarative policy runner to use its normal caching
strategy.
2018-04-05 13:59:05 +01:00
Bob Van Landuyt
148816cd67 Port read_cross_project ability from EE 2018-02-22 17:11:36 +01:00
Jarka Kadlecova
994e7d1359 Create system notes for MR too, improve doc + clean up code 2017-09-14 14:50:32 +02:00
Jarka Kadlecova
b928720852 Support discussion locking in the backend 2017-09-14 14:50:32 +02:00
http://jneen.net/
37c401433b convert all the policies to DeclarativePolicy 2017-06-27 12:44:37 -07:00
Yorick Peterse
f694f94c49
Added IssueCollection
This class can be used to reduce a list of issues down to a subset based
on user permissions. This class operates in such a way that it can
reduce issues using as few queries as possible, if any at all.
2016-11-07 12:49:24 +01:00
http://jneen.net/
4d904bf352 port issues to Issu{able,e}Policy 2016-08-30 11:39:22 -07:00