# frozen_string_literal: true
class Groups::Security::DashboardController < Groups::ApplicationController
  layout 'group'

  before_action only: [:show] do
    push_frontend_feature_flag(:first_class_vulnerabilities, group, default_enabled: true)
  end

  def show
    render :unavailable unless dashboard_available?
  end

  private

  def dashboard_available?
    group.feature_available?(:security_dashboard) &&
      can?(current_user, :read_group_security_dashboard, group)
  end
end