"Lock issue" action is visible without permissions to lock
Steps to reproduce
- create issue in public project that you are not member of
- open burger menu next to issue title
What is the current bug behavior?
"Lock issue" is visible and when clicked displays "issue unlocked":
the GraphQL reponse contains no error:
[
{
"data": {
"issueSetLocked": {
"issue": {
"id": "gid://gitlab/Issue/127672723",
"discussionLocked": false,
"__typename": "Issue"
},
"errors": [],
"__typename": "IssueSetLockedPayload"
}
}
}
]
What is the expected correct behavior?
menu entry is not visible, GraphQL endpoint returns error reponse