fix: check permissions before adding environment variables (#212)

fix #210
SwissDataScienceCenter · Sep 12, 2019 · 086a500 · 086a500
1 parent 5379935
commit 086a500
Showing 1 changed file with 5 additions and 4 deletions.
diff --git a/jupyterhub/spawners.py b/jupyterhub/spawners.py
@@ -127,10 +127,11 @@ def start(self, *args, **kwargs):
 
         self.cmd = "jupyterhub-singleuser"
 
-        environment = {
-            variable.key: variable.value for variable in gl_project.variables.list()
-        }
-        self.environment.update(environment)
+        if access_level >= gitlab.MAINTAINER_ACCESS:
+            environment = {
+                variable.key: variable.value for variable in gl_project.variables.list()
+            }
+            self.environment.update(environment)
 
         result = yield super().start(*args, **kwargs)
         return result