ad309f5d11
Refactor snippets finder & dont return internal snippets for external users See merge request !2094
20 lines
481 B
Ruby
20 lines
481 B
Ruby
class ProjectSnippetPolicy < BasePolicy
|
|
def rules
|
|
can! :read_project_snippet if @subject.public?
|
|
return unless @user
|
|
|
|
if @user && (@subject.author == @user || @user.admin?)
|
|
can! :read_project_snippet
|
|
can! :update_project_snippet
|
|
can! :admin_project_snippet
|
|
end
|
|
|
|
if @subject.internal? && !@user.external?
|
|
can! :read_project_snippet
|
|
end
|
|
|
|
if @subject.project.team.member?(@user)
|
|
can! :read_project_snippet
|
|
end
|
|
end
|
|
end
|