Merge branch '436652-follow-up' into 'master'

Update artifact registry details resolver permission

See merge request https://gitlab.com/gitlab-org/gitlab/-/merge_requests/146018



Merged-by: Dzmitry Meshcharakou <12459192-dmeshcharakou@users.noreply.gitlab.com>
Approved-by: Dzmitry Meshcharakou <12459192-dmeshcharakou@users.noreply.gitlab.com>
Reviewed-by: Dzmitry Meshcharakou <12459192-dmeshcharakou@users.noreply.gitlab.com>
Co-authored-by: David Fernandez <dfernandez@gitlab.com>

ee/app/graphql/resolvers/google_cloud/artifact_registry/artifact_resolver.rb

@@ -8,7 +8,7 @@ class ArtifactResolver < BaseResolver
 
         type ::Types::GoogleCloud::ArtifactRegistry::ArtifactDetailsType, null: true
 
-        authorize :read_container_image
+        authorize :read_google_cloud_artifact_registry
 
         argument :google_cloud_project_id,
           GraphQL::Types::String,

ee/spec/requests/api/graphql/google_cloud/artifact_registry/docker_image_spec.rb

@@ -6,7 +6,7 @@
 RSpec.describe 'getting the google cloud docker image linked to a project', :freeze_time, feature_category: :container_registry do
   include GraphqlHelpers
 
-  let_it_be(:project) { create(:project) }
+  let_it_be_with_reload(:project) { create(:project) }
 
   let_it_be_with_refind(:project_integration) do
     create(
@@ -143,6 +143,16 @@
     it_behaves_like 'returning a blank response'
   end
 
+  context 'with an anonymous user on a public project' do
+    let(:user) { nil }
+
+    before do
+      project.update!(visibility: Gitlab::VisibilityLevel::PUBLIC)
+    end
+
+    it_behaves_like 'returning a blank response'
+  end
+
   context 'when google artifact registry feature is unavailable' do
     before do
       stub_saas_features(google_cloud_support: false)

ee/spec/requests/api/graphql/project/google_cloud/artifact_registry/docker_images_spec.rb

@@ -7,7 +7,7 @@
   include GraphqlHelpers
   include GoogleApi::CloudPlatformHelpers
 
-  let_it_be(:project) { create(:project) }
+  let_it_be_with_reload(:project) { create(:project) }
   let_it_be_with_refind(:project_integration) do
     create(:google_cloud_platform_artifact_registry_integration, project: project)
   end
@@ -173,6 +173,16 @@
     it { is_expected.to be_nil }
   end
 
+  context 'with an anonymous user on a public project' do
+    let(:user) { nil }
+
+    before do
+      project.update!(visibility: Gitlab::VisibilityLevel::PUBLIC)
+    end
+
+    it { is_expected.to be_nil }
+  end
+
   context 'when google artifact registry feature is unavailable' do
     before do
       stub_saas_features(google_cloud_support: false)