Don't allow full access to guests in ReferenceExtractor

2015-03-27 12:18:15 +01:00 · 2015-03-27 12:18:15 +01:00 · 756e7aa8c3
parent d9698628d9
commit 756e7aa8c3
1 changed files with 0 additions and 3 deletions
--- a/lib/gitlab/reference_extractor.rb
+++ b/lib/gitlab/reference_extractor.rb
@ -13,9 +13,6 @@ module Gitlab
    end

    def can?(user, action, subject)
-      # When extracting references, no user means access to everything.
-      return true if user.nil?
-
      Ability.abilities.allowed?(user, action, subject)
    end