Provide a label template policy

danidoni · Aug 6, 2024 · 3700b2d · 3700b2d
1 parent abf02f5
commit 3700b2d
Show file tree

Hide file tree

Showing 3 changed files with 10 additions and 2 deletions.
diff --git a/src/api/app/controllers/webui/projects/label_templates_controller.rb b/src/api/app/controllers/webui/projects/label_templates_controller.rb
@@ -4,7 +4,7 @@ class LabelTemplatesController < WebuiController
       before_action :set_project
 
       def index
-        head :not_found unless Flipper.enabled?(:labels, User.session)
+        authorize LabelTemplate.new(project: @project), :index?
 
         @label_templates = @project.label_templates
       end

diff --git a/src/api/app/policies/label_template_policy.rb b/src/api/app/policies/label_template_policy.rb
@@ -0,0 +1,8 @@
+class LabelTemplatePolicy < ApplicationPolicy
+  def index?
+    return false unless Flipper.enabled?(:labels, @user)
+    return false unless record.project.maintainers.include?(@user)
+
+    true
+  end
+end
diff --git a/src/api/app/views/webui/project/_tabs.html.haml b/src/api/app/views/webui/project/_tabs.html.haml
@@ -29,5 +29,5 @@
         = tab_link('Staging', staging_workflow_path(project), active, 'scrollable-tab-link')
       - elsif policy(Staging::Workflow.new(project: project)).create?
         = tab_link('Staging', new_staging_workflow_path(project: project), active, 'scrollable-tab-link')
-      - if Flipper.enabled?(:labels, User.session)
+      - if policy(LabelTemplate.new(project: project)).index?
         = tab_link('Label templates', project_label_templates_path(project), false, 'scrollable-tab-link')