Commit 983bc6b1 authored by Dylan Griffith's avatar Dylan Griffith

Remove unnecessary runner.is_shared? checks in api because they are handled by policy

parent b35d16a7
...@@ -190,14 +190,12 @@ module API ...@@ -190,14 +190,12 @@ module API
def authenticate_update_runner!(runner) def authenticate_update_runner!(runner)
return if current_user.admin? return if current_user.admin?
forbidden!("Runner is shared") if runner.is_shared?
forbidden!("No access granted") unless can?(current_user, :update_runner, runner) forbidden!("No access granted") unless can?(current_user, :update_runner, runner)
end end
def authenticate_delete_runner!(runner) def authenticate_delete_runner!(runner)
return if current_user.admin? return if current_user.admin?
forbidden!("Runner is shared") if runner.is_shared?
forbidden!("Runner associated with more than one project") if runner.projects.count > 1 forbidden!("Runner associated with more than one project") if runner.projects.count > 1
forbidden!("No access granted") unless can?(current_user, :delete_runner, runner) forbidden!("No access granted") unless can?(current_user, :delete_runner, runner)
end end
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment