fixup! Added link to bulk assign issues to MR author. (Issue #18876)

app/controllers/projects/merge_requests_controller.rb

@@ -29,6 +29,8 @@ class Projects::MergeRequestsController < Projects::ApplicationController
   # Allow modify merge_request
   before_action :authorize_update_merge_request!, only: [:close, :edit, :update, :remove_wip, :sort]
 
+  before_action :authenticate_user!, only: [:assign_related_issues]
+
   before_action :authorize_can_resolve_conflicts!, only: [:conflicts, :resolve_conflicts]
 
   def index

app/services/merge_requests/assign_issues_service.rb

@@ -3,9 +3,9 @@ module MergeRequests
     def assignable_issues
       @assignable_issues ||= begin
         if current_user == merge_request.author
-          closes_issues.
-            reject { |issue| issue.assignee_id? }.
-            select { |issue| can?(current_user, :admin_issue, issue) }
+          closes_issues.select do |issue|
+            !issue.assignee_id? && can?(current_user, :admin_issue, issue)
+          end
         else
           []
         end

spec/controllers/projects/merge_requests_controller_spec.rb

@@ -738,5 +738,22 @@ describe Projects::MergeRequestsController do
 
       expect(flash[:notice]).to eq '1 issue has been assigned to you'
     end
+
+    it 'calls MergeRequests::AssignIssuesService' do
+      expect(MergeRequests::AssignIssuesService).to receive(:new).
+        with(project, user, merge_request: merge_request).
+        and_return(double(execute: {count: 1}))
+
+      post_assign_issues
+    end
+
+    it 'is skipped when not signed in' do
+      project.update!(visibility_level: Gitlab::VisibilityLevel::PUBLIC)
+      sign_out(:user)
+
+      expect(MergeRequests::AssignIssuesService).not_to receive(:new)
+
+      post_assign_issues
+    end
   end
 end