• Amparo Luna's avatar
    Update ProjectSnippets rule for guest authors · 4c63ab7d
    Amparo Luna authored
    Example scenario:
    A user with developer access creates a snippet and as the author is able
    to update and delete the snippet. This user is then demoted to guest in
    the project, but keeps the access to update and delete (as the author).
    
    This new rule prevents the access to update and delete the snippet for
    the author if their access level is less than reporter. Those author
    users can still see the snippet and add comments.
    4c63ab7d
project_snippet_policy_spec.rb 5.26 KB