Require read_code instead of download_code for project related views
requested to merge 376180-separate-view-code-permission-from-download-code-create-2-permissions-4 into master
What does this MR do and why?
Require read_code instead of download_code for project related views
Contributes to: #376180 (closed)
Some screenshots of affected views
How to set up and validate locally
The abilities that read_code should allow are intended to be a subset of those of download_code so this should not have any user impact for now (https://gitlab.com/gitlab-org/gitlab/-/blob/master/app/policies/project_policy.rb#L853)
Check that the project page (e.g http://127.0.0.1:3000/root/test_project) looks as expected
MR acceptance checklist
This checklist encourages us to confirm any changes have been analyzed to reduce risks in quality, performance, reliability, security, and maintainability.
-
I have evaluated the MR acceptance checklist for this MR.
Related to #376180 (closed)
Edited by Jerry Seto