debian-mirror-gitlab/app/policies/identity_provider_policy.rb
2019-12-04 20:38:33 +05:30

17 lines
435 B
Ruby

# frozen_string_literal: true
class IdentityProviderPolicy < BasePolicy
desc "Provider is SAML or CAS3"
condition(:protected_provider, scope: :subject, score: 0) { %w(saml cas3).include?(@subject.to_s) }
rule { anonymous }.prevent_all
rule { default }.policy do
enable :unlink
enable :link
end
rule { protected_provider }.prevent(:unlink)
end
IdentityProviderPolicy.prepend_if_ee('EE::IdentityProviderPolicy')