Files
gitlab-foss/app/policies/personal_access_token_policy.rb
2024-09-05 21:07:30 +00:00

13 lines
313 B
Ruby

# frozen_string_literal: true
class PersonalAccessTokenPolicy < BasePolicy
condition(:is_owner) { user && subject.user_id == user.id && !subject.impersonation }
rule { (is_owner | admin) & ~blocked }.policy do
enable :read_token
enable :revoke_token
end
end
PersonalAccessTokenPolicy.prepend_mod