• Alexandru Croitor's avatar
    Disallow non-members to set issue metadata on issue create · ec30a8d8
    Alexandru Croitor authored
    When creating an issue a guest member is allowed to set issue
    metadata, however in public projects authenticated non-members
    get guest access as well, so we would restrict permission to
    set issue metadata for non-members specifically.
    
    Changelog: security
    ec30a8d8
issue_policy_spec.rb 20.9 KB