Require read_code instead of download_code for project related actions
requested to merge 376180-separate-view-code-permission-from-download-code-create-2-permissions-5 into master
What does this MR do and why?
Require read_code instead of download_code for project related actions. The abilities that read_code should allow are intended to be a subset of those of download_code so this should not have any user impact for now (https://gitlab.com/gitlab-org/gitlab/-/blob/master/app/policies/project_policy.rb#L853)
Contributes to: #376180 (closed)
MR acceptance checklist
This checklist encourages us to confirm any changes have been analyzed to reduce risks in quality, performance, reliability, security, and maintainability.
-
I have evaluated the MR acceptance checklist for this MR.
Related to #376180 (closed)
Edited by Jerry Seto