Remove Ci::Runner resource type handling from Authz::CustomAbility
What does this MR do and why?
- Update
RunnerPolicy
to check for if user has theread_runners
custom ability on the runner's ownerProject
orGroup
- Remove handling of
Ci::Runner
fromAuthz::CustomAbility
– custom abilities should always be checked against a project or a group they are granted for
References
https://gitlab.com/gitlab-org/gitlab/-/issues/576900+.
MR acceptance checklist
Evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.
Edited by Eugie Limpin