File: issue_links_controller.rb

package info (click to toggle)
gitlab 17.6.5-19
  • links: PTS, VCS
  • area: main
  • in suites: sid
  • size: 629,368 kB
  • sloc: ruby: 1,915,304; javascript: 557,307; sql: 60,639; xml: 6,509; sh: 4,567; makefile: 1,239; python: 406
file content (56 lines) | stat: -rw-r--r-- 1,455 bytes parent folder | download
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
# frozen_string_literal: true

module Projects
  class IssueLinksController < Projects::ApplicationController
    include IssuableLinks

    before_action :authorize_admin_issue_link!, only: [:create, :destroy]
    before_action :authorize_issue_link_association!, only: :destroy
    before_action :disable_query_limit!, only: :create

    feature_category :team_planning
    urgency :low

    private

    def disable_query_limit!
      Gitlab::QueryLimiting.disable!('https://gitlab.com/gitlab-org/gitlab/-/issues/467087')
    end

    def authorize_admin_issue_link!
      render_403 unless can?(current_user, :admin_issue_link, issue)
    end

    def authorize_issue_link_association!
      render_404 if link.target != issue && link.source != issue
    end

    # rubocop: disable CodeReuse/ActiveRecord
    def issue
      @issue ||=
        IssuesFinder.new(current_user, project_id: @project.id)
                    .find_by!(iid: params[:issue_id])
    end
    # rubocop: enable CodeReuse/ActiveRecord

    def list_service
      IssueLinks::ListService.new(issue, current_user)
    end

    def create_service
      IssueLinks::CreateService.new(issue, current_user, create_params)
    end

    def destroy_service
      IssueLinks::DestroyService.new(link, current_user)
    end

    def link
      @link ||= IssueLink.find(params[:id])
    end

    def create_params
      params.permit(:link_type, issuable_references: [])
    end
  end
end