Remove writing issues/notes from non-auth user abilities

Dmitriy Zaporozhets
1 parent 09cb2ba8
Showing 1 changed file with 11 additions and 1 deletions Show diff stats
app/models/ability.rb
@@ -30,7 +30,17 @@ class Ability
                 end
       if project && project.public
-        public_project_rules
+        [
+          :read_project,
+          :read_wiki,
+          :read_issue,
+          :read_milestone,
+          :read_project_snippet,
+          :read_team_member,
+          :read_merge_request,
+          :read_note,
+          :download_code
+        ]
       else
         []
       end