Allow admins/auditors to read private personal snippets
This commit is contained in:
parent
16ab0050f6
commit
40900669b3
|
|
@ -29,4 +29,6 @@ class PersonalSnippetPolicy < BasePolicy
|
|||
rule { anonymous }.prevent :comment_personal_snippet
|
||||
|
||||
rule { can?(:comment_personal_snippet) }.enable :award_emoji
|
||||
|
||||
rule { full_private_access }.enable :read_personal_snippet
|
||||
end
|
||||
|
|
|
|||
|
|
@ -0,0 +1,5 @@
|
|||
---
|
||||
title: Allow users with full private access to read private personal snippets.
|
||||
merge_request: 24560
|
||||
author:
|
||||
type: fixed
|
||||
|
|
@ -399,10 +399,7 @@ describe Event do
|
|||
expect(event.visible_to_user?(nil)).to be_falsy
|
||||
expect(event.visible_to_user?(non_member)).to be_falsy
|
||||
expect(event.visible_to_user?(author)).to be_truthy
|
||||
|
||||
# It is very unexpected that a private personal snippet is not visible
|
||||
# to an instance administrator. This should be fixed in the future.
|
||||
expect(event.visible_to_user?(admin)).to be_falsy
|
||||
expect(event.visible_to_user?(admin)).to be_truthy
|
||||
end
|
||||
end
|
||||
end
|
||||
|
|
|
|||
|
|
@ -128,6 +128,17 @@ describe PersonalSnippetPolicy do
|
|||
end
|
||||
end
|
||||
|
||||
context 'admin user' do
|
||||
subject { permissions(admin_user) }
|
||||
|
||||
it do
|
||||
is_expected.to be_allowed(:read_personal_snippet)
|
||||
is_expected.to be_disallowed(:comment_personal_snippet)
|
||||
is_expected.to be_disallowed(:award_emoji)
|
||||
is_expected.to be_disallowed(*author_permissions)
|
||||
end
|
||||
end
|
||||
|
||||
context 'external user' do
|
||||
subject { permissions(external_user) }
|
||||
|
||||
|
|
|
|||
Loading…
Reference in New Issue