From 9fbbd6a68ec603de8fd32681d90f47aa98cbd289 Mon Sep 17 00:00:00 2001
From: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com>
Date: Tue, 27 Aug 2013 12:41:49 +0300
Subject: [PATCH] Return empty abilities if user is blocked
---
app/models/ability.rb | 1 +
1 file changed, 1 insertion(+)
diff --git a/app/models/ability.rb b/app/models/ability.rb
index 0b77564adc6..74f92fe7438 100644
--- a/app/models/ability.rb
+++ b/app/models/ability.rb
@@ -2,6 +2,7 @@ class Ability
class << self
def allowed(user, subject)
return [] unless user.kind_of?(User)
+ return [] if user.blocked?
case subject.class.name
when "Project" then project_abilities(user, subject)
--
GitLab