From 058de0d40127e20b3068d159e053539f1e353fc3 Mon Sep 17 00:00:00 2001
From: jhampton <jhampton@gitlab.com>
Date: Mon, 3 Dec 2018 11:56:49 -0500
Subject: [PATCH] Conditionally send variable values

We only want to send trigger variable values if the user is a
maintainer.
---
 app/serializers/trigger_variable_entity.rb | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/app/serializers/trigger_variable_entity.rb b/app/serializers/trigger_variable_entity.rb
index 56203113631..8845540cc30 100644
--- a/app/serializers/trigger_variable_entity.rb
+++ b/app/serializers/trigger_variable_entity.rb
@@ -3,5 +3,6 @@
 class TriggerVariableEntity < Grape::Entity
   include RequestAwareEntity
 
-  expose :key, :value, :public
+  expose :key, :public
+  expose :value, if: ->(_, _) { request.project.team.maintainer?(request.current_user) }
 end
-- 
GitLab