Hide `/tag` quick action from non-authorised users

c491d864 · Peter Leitzen · 839b776f · c491d864
Commit c491d864 authored Jul 23, 2018 by Peter Leitzen
Show whitespace changes
Inline Side-by-side

Showing with 1 addition and 2 deletions

app/services/quick_actions/interpret_service.rb app/services/quick_actions/interpret_service.rb +1 -2

No files found.
--- a/app/services/quick_actions/interpret_service.rb
+++ b/app/services/quick_actions/interpret_service.rb
@@ -592,8 +592,7 @@ module QuickActions
      tag_name_and_message.split(' ', 2)
    end
    condition do
-      issuable.is_a?(Commit)
+      issuable.is_a?(Commit) && current_user.can?(:push_code, project)
-      # TODO authorize
    end
    command :tag do |(tag_name, message)|
      @updates[:tag_name] = tag_name