Custom group-level templates are not accessible for users with 'Developer' role

Summary

When a project maintainer sets a group to be the designated "custom group-level project template", the new templates are only accessible to users with Maintainer or above permissions. This should be accessible to any role that has access to create new projects per the documentation. Currently, it looks like it was improperly scoped to the maintainer role https://gitlab.com/gitlab-org/gitlab-ee/blob/master/ee/app/models/ee/user.rb#L184

Steps to reproduce

  1. Setup custom group-level project templates
  2. Login as a user with developer role that has the ability to create projects.
  3. Attempt to create a project from a custom project template 4) The project templates will be empty for the developer user
  4. Login as a maintainer
  5. Create a new project from template 7) the project templates will be selectable for maintainer role.

What is the current bug behavior?

Developers cannot see project templates, even though they are able to create projects.

What is the expected correct behavior?

Developer role can access project templates and start projects from them.

Possible fixes

Change this line to https://gitlab.com/gitlab-org/gitlab-ee/blob/master/ee/app/models/ee/user.rb#L184

to ::Gitlab::Access::DEVELOPER)

Relevant Support Tickets (internal)

  • https://gitlab.zendesk.com/agent/tickets/129651
Edited Aug 19, 2019 by DeAndre Harris
Assignee Loading
Time tracking Loading