Make :register_project_runners permission only available to project owners
Everyone can contribute. Help move this issue forward while earning points, leveling up and collecting rewards.
Currently, only group owners can register new group runners. However, project maintainers are able to register project runners. Given Permission alignment for OWNER and MAINTAINER r... (#374607), we're aligning the permissions between group owners and project owners.
Proposal
Make :register_project_runners permission (and :create_runners on projects) only available to project owners.
Implementation steps
- Move
enable :register_project_runnersfromrule { can?(:maintainer_access) }block torule { can?(:owner_access) }.policy doblock. - Same for ProjectPolicy.
- Update specs.
Edited by 🤖 GitLab Bot 🤖