Set rebuild? policy for Token::WorkflowPolicy

To check if the token's user can rebuild the object to authorize (package or project).
openSUSE · Sep 22, 2021 · eab7b00 · eab7b00
1 parent 4ac19c3
commit eab7b00
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/src/api/app/policies/token/workflow_policy.rb b/src/api/app/policies/token/workflow_policy.rb
@@ -3,4 +3,9 @@ class Token::WorkflowPolicy < TokenPolicy
   def trigger?
     user.is_active? && Flipper.enabled?(:trigger_workflow, user)
   end
+
+  def rebuild?
+    return PackagePolicy.new(user, record.object_to_authorize).update? if record.object_to_authorize.is_a?(Package)
+    return ProjectPolicy.new(user, record.object_to_authorize).update? if record.object_to_authorize.is_a?(Project)
+  end
 end