Merge branch 'ajk-gql-ci-job-permission-check' into 'master'

Enforce permission check on CI builds in GraphQL

See merge request gitlab-org/gitlab!50882

app/graphql/types/ci/job_type.rb

@@ -2,9 +2,9 @@
 
 module Types
   module Ci
-    # rubocop: disable Graphql/AuthorizeTypes
     class JobType < BaseObject
       graphql_name 'CiJob'
+      authorize :read_commit_status
 
       field :pipeline, Types::Ci::PipelineType, null: true,
             description: 'Pipeline the job belongs to'

spec/graphql/types/ci/job_type_spec.rb

@@ -4,6 +4,7 @@ require 'spec_helper'
 
 RSpec.describe Types::Ci::JobType do
   specify { expect(described_class.graphql_name).to eq('CiJob') }
+  specify { expect(described_class).to require_graphql_authorizations(:read_commit_status) }
 
   it 'exposes the expected fields' do
     expected_fields = %i[