Commit 756e7aa8 authored by Douwe Maan's avatar Douwe Maan

Don't allow full access to guests in ReferenceExtractor

parent d9698628
...@@ -13,9 +13,6 @@ module Gitlab ...@@ -13,9 +13,6 @@ module Gitlab
end end
def can?(user, action, subject) def can?(user, action, subject)
# When extracting references, no user means access to everything.
return true if user.nil?
Ability.abilities.allowed?(user, action, subject) Ability.abilities.allowed?(user, action, subject)
end end
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment