Skip to content

Fix permission for new/edit for CRM Contacts

Rachael Wright-Munn requested to merge gitlab-community/gitlab:auth-new-edit-route-for-contacts into master
  • Please check this box if this contribution uses AI-generated content (including content generated by GitLab Duo features) as outlined in the GitLab DCO & CLA

What does this MR do and why?

Fix permission for new/edit for CRM Contacts

Authorize the user has admin_crm_contacts when accessing new/edit. Otherwise, they will see the index page with a new form, and upon submitting that form get an unclear error.

MR acceptance checklist

Please evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.

How to set up and validate locally

  • For a group with crm_enabled, as a member of that group with reporter access:
  • Go to groups/<groupname>/-/crm/contacts/new directly
    • Get a 404
Edited by 🤖 GitLab Bot 🤖

Merge request reports