Show only projects where user is creator, has project access >= 20, or has group access.

2 files changed, 9 insertions, 2 deletions

diff --git a/app.js b/app.js
index 5d847f76..35408bb0 100644
--- a/app.js
+++ b/app.js
@@ -448,6 +448,7 @@ app.get('/gitlab', function (req, res) {
     models.User.findById(req.cookies.userid)
         .then(function(user) {
             ret.accesstoken = user.accessToken;
+            ret.profileid = user.profileid;
             request(
                 config.gitlab.baseURL + '/api/v3/projects?access_token=' + user.accessToken,
                 function(error, httpResponse, body) {
diff --git a/public/js/index.js b/public/js/index.js
index a1e0445b..7e692bee 100644
--- a/public/js/index.js
+++ b/public/js/index.js
@@ -1164,7 +1164,10 @@ ui.toolbar.export.snippet.click(function() {
                     return (a.path_with_namespace < b.path_with_namespace) ? -1 : ((a.path_with_namespace > b.path_with_namespace) ? 1 : 0);
                 });
                 data.projects.forEach(function(project) {
-                    if (!project.snippets_enabled) {
+                    if (!project.snippets_enabled
+                        || (project.permissions.project_access === null && project.permissions.group_access === null)
+                        || (project.permissions.project_access !== null && project.permissions.project_access.access_level < 20))
+                    {
                         return;
                     }
                     $('<option>').val(project.id).text(project.path_with_namespace).appendTo("#snippetExportModalProjects");
@@ -1249,7 +1252,10 @@ ui.toolbar.import.snippet.click(function () {
                     return (a.path_with_namespace < b.path_with_namespace) ? -1 : ((a.path_with_namespace > b.path_with_namespace) ? 1 : 0);
                 });
                 data.projects.forEach(function(project) {
-                    if (!project.snippets_enabled) {
+                    if (!project.snippets_enabled
+                        || (project.permissions.project_access === null && project.permissions.group_access === null)
+                        || (project.permissions.project_access !== null && project.permissions.project_access.access_level < 20))
+                    {
                         return;
                     }
                     $('<option>').val(project.id).text(project.path_with_namespace).appendTo("#snippetImportModalProjects");