in app/controllers/application_controller.rb [40:51]
def authenticate_public_page!
unless project.public
unless current_user
redirect_to(new_user_sessions_path(state: generate_oauth_state(request.fullpath))) and return
end
unless current_user.can_access_project?(project.gitlab_id)
page_404 and return
end
end
end