• Alexandru Croitor's avatar
    Disallow non-members to set issue metadata on issue create · ec30a8d8
    Alexandru Croitor authored
    When creating an issue a guest member is allowed to set issue
    metadata, however in public projects authenticated non-members
    get guest access as well, so we would restrict permission to
    set issue metadata for non-members specifically.
    
    Changelog: security
    ec30a8d8
service_desk_handler_spec.rb 12.7 KB