25 lines
618 B
Ruby
25 lines
618 B
Ruby
# frozen_string_literal: true
|
|
|
|
module Constraints
|
|
class AdminConstrainer
|
|
def matches?(request)
|
|
if Gitlab::CurrentSettings.admin_mode
|
|
admin_mode_enabled?(request)
|
|
else
|
|
user_is_admin?(request)
|
|
end
|
|
end
|
|
|
|
private
|
|
|
|
def user_is_admin?(request)
|
|
request.env['warden'].authenticate? && request.env['warden'].user.admin?
|
|
end
|
|
|
|
def admin_mode_enabled?(request)
|
|
Gitlab::Session.with_session(request.session) do
|
|
request.env['warden'].authenticate? && Gitlab::Auth::CurrentUserMode.new(request.env['warden'].user).admin_mode?
|
|
end
|
|
end
|
|
end
|
|
end
|