Only read design activity iff we can read_group

5579cb99 · Alex Kalderimis · bd0b030b · 5579cb99
Commit 5579cb99 authored Jan 16, 2021 by Alex Kalderimis
Show whitespace changes
Inline Side-by-side

Showing with 1 addition and 1 deletion

app/policies/group_policy.rb app/policies/group_policy.rb +1 -1

No files found.
--- a/app/policies/group_policy.rb
+++ b/app/policies/group_policy.rb
@@ -66,7 +66,7 @@ class GroupPolicy < BasePolicy
  with_scope :subject
  condition(:has_project_with_service_desk_enabled) { @subject.has_project_with_service_desk_enabled? }

-  rule { design_management_enabled }.policy do
+  rule { can?(:read_group) & design_management_enabled }.policy do
    enable :read_design_activity
  end