--- a/Allura/allura/lib/repository.py
+++ b/Allura/allura/lib/repository.py
@@ -15,6 +15,7 @@
from allura import model as M
from allura.lib import security
from allura.lib.decorators import require_post
+from allura.lib.security import has_access
from allura.app import Application, SitemapEntry, DefaultAdminController, ConfigOption
log = logging.getLogger(__name__)
@@ -106,7 +107,7 @@
self.repo.upstream_repo.name,
className='nav_child')
]
- if len(c.app.repo.branches):
+ if len(c.app.repo.branches) and has_access(c.app.repo, 'admin'):
links.append(SitemapEntry('Request Merge', c.app.url + 'request_merge',
ui_icon=g.icons['merge'],
className='nav_child'))