debian-mirror-gitlab/app/policies/base_policy.rb

39 lines
1.2 KiB
Ruby
Raw Normal View History

2018-11-18 11:00:15 +05:30
# frozen_string_literal: true
2017-09-10 17:25:29 +05:30
require_dependency 'declarative_policy'
2016-09-29 09:46:39 +05:30
2017-09-10 17:25:29 +05:30
class BasePolicy < DeclarativePolicy::Base
desc "User is an instance admin"
with_options scope: :user, score: 0
condition(:admin) { @user&.admin? }
2016-09-29 09:46:39 +05:30
2019-09-04 21:01:54 +05:30
desc "User is blocked"
with_options scope: :user, score: 0
condition(:blocked) { @user&.blocked? }
2019-03-02 22:35:43 +05:30
desc "User has access to all private groups & projects"
with_options scope: :user, score: 0
condition(:full_private_access) { @user&.full_private_access? }
2017-09-10 17:25:29 +05:30
with_options scope: :user, score: 0
condition(:external_user) { @user.nil? || @user.external? }
2017-08-17 22:00:37 +05:30
2017-09-10 17:25:29 +05:30
with_options scope: :user, score: 0
condition(:can_create_group) { @user&.can_create_group }
2016-09-29 09:46:39 +05:30
2017-09-10 17:25:29 +05:30
desc "The application is restricted from public visibility"
condition(:restricted_public_level, scope: :global) do
2018-03-17 18:26:18 +05:30
Gitlab::CurrentSettings.current_application_settings.restricted_visibility_levels.include?(Gitlab::VisibilityLevel::PUBLIC)
2016-09-29 09:46:39 +05:30
end
2018-03-27 19:54:05 +05:30
2019-07-07 11:18:12 +05:30
condition(:external_authorization_enabled, scope: :global, score: 0) do
::Gitlab::ExternalAuthorization.perform_check?
end
rule { external_authorization_enabled & ~full_private_access }.policy do
prevent :read_cross_project
end
2018-03-27 19:54:05 +05:30
rule { default }.enable :read_cross_project
2016-09-29 09:46:39 +05:30
end